Sharing and merging bayes data?

2009-12-16 Thread Rajkumar S
Hello, I have 2 SA servers running for a single domain. Both were primed with a set of 200 spam and ham messages are are now auto learning. After about a day both have auto learned different numbers of ham and spam mails. Is it possible to merge the bayes data every night and update both servers w

Re: Cooperative data gathering project.

2009-12-16 Thread Per Jessen
Jason Haar wrote: > On 12/17/2009 03:30 PM, Marc Perkel wrote: >> Then the third filed is NONE. That's how I do it. But the idea is >> that any kind of daya can be collectively gathered and distributed. >> > Instead of a TCP channel (which means software), what about using DNS? > If the SA clients

Re: [OT] Museum piece...

2009-12-16 Thread Eray Aslan
[Replying randomly to one of the emails in the thread] On 17.12.2009 05:41, David B Funk wrote: > Hah, I've still got my SWTPC 6800 but it's been hopped up. It's > got the original M6800 plus a 6809 and a Z80. Havn't fired it up > in decades, so don't know if it'll still boot. ;() http://ars.user

Re: Museum piece...

2009-12-16 Thread Rajkumar S
On Thu, Dec 17, 2009 at 10:05 AM, McDonald, Dan wrote: > I miss my Ohio Scientific C3. I had a Tektrinix 4027 terminal with more ram > than the computer. Just wondering if any one here started off with BBC Micro? I had couple of them in my school and they were truly sweet to program. http://en.

RE: emailreg.org - tainted white list

2009-12-16 Thread R-Elists
> > I'm the only one? Really? That doesn't jibe with my memory, > but I'm not scanning the entire list to prove you wrong. > > Really? > > Yeah, sorry, not buying it. > LuKreme et al, you were not the only one much goes under or over the radar on the list... re those rules, we see 2

Re: Museum piece...

2009-12-16 Thread McDonald, Dan
On Dec 16, 2009, at 9:42 PM, "David B Funk" > wrote: On Wed, 16 Dec 2009, Marc Perkel wrote: I don't know if anyone still remembers this but this is what I had for my first computer back on 1979. I miss my Ohio Scientific C3. I had a Tektrinix 4027 terminal with more ram than the com

Re: emailreg.org - tainted white list

2009-12-16 Thread LuKreme
On 16-Dec-2009, at 16:11, Michael Hutchinson wrote: > So far only 1 person on this list has claimed to have been hit by Spam that > has been let through by the Habeas rules in SA. I'm the only one? Really? That doesn’t jibe with my memory, but I'm not scanning the entire list to prove you wrong

Re: Museum piece...

2009-12-16 Thread David B Funk
On Wed, 16 Dec 2009, Marc Perkel wrote: > I don't know if anyone still remembers this but this is what I had for > my first computer back on 1979. > > http://www.scotthodson.com/blog/wp-content/uploads/2007/08/imsai8080.jpg > > IMSAI 8080 - except I had a Z80 board for it. Hah, I've still got my

Re: OT: Museum piece...

2009-12-16 Thread Gene Heskett
On Wednesday 16 December 2009, Dave Pooser wrote: >On 12/16/09 8:20 PM, "Gene Heskett" wrote: >> I agree Benny. To demo that, I have the old coco2 that acted like a >> $20,000 dollar Grass Valley Group E-Disk for the production video >> switchers in the 300 series they made about 20 years ago. Fo

Re: OT: Museum piece...

2009-12-16 Thread Dave Pooser
On 12/16/09 8:20 PM, "Gene Heskett" wrote: > I agree Benny. To demo that, I have the old coco2 that acted like a $20,000 > dollar Grass Valley Group E-Disk for the production video switchers in the > 300 series they made about 20 years ago. For $245 worth of stuff, its 4x > faster and 100x more

Re: OT: Museum piece...

2009-12-16 Thread Gene Heskett
On Wednesday 16 December 2009, Aaron Wolfe wrote: >On Wed, Dec 16, 2009 at 9:20 PM, Gene Heskett wrote: >> On Wednesday 16 December 2009, Benny Pedersen wrote: [...] >>>kids need to know how little is needed to do simple things, and when >>>thay have seen it, thay will code much better if thay ge

Re: Cooperative data gathering project.

2009-12-16 Thread Jason Haar
On 12/17/2009 03:30 PM, Marc Perkel wrote: Then the third filed is NONE. That's how I do it. But the idea is that any kind of daya can be collectively gathered and distributed. Instead of a TCP channel (which means software), what about using DNS? If the SA clients did RBL lookups that contain

Re: OT: Museum piece...

2009-12-16 Thread Aaron Wolfe
On Wed, Dec 16, 2009 at 9:20 PM, Gene Heskett wrote: > On Wednesday 16 December 2009, Benny Pedersen wrote: >>On ons 16 dec 2009 16:49:52 CET, Charles Gregory wrote >> >>> On Tue, 15 Dec 2009, Chris Hoogendyk wrote: Marc Perkel wrote: > http://www.vintage-computer.com/asr33.shtml >>>

Re: Cooperative data gathering project.

2009-12-16 Thread Marc Perkel
Then the third filed is NONE. That's how I do it. But the idea is that any kind of daya can be collectively gathered and distributed. R-Elists wrote: marc, what if there is no RDNS ? ;-) - rh

Re: Museum piece...

2009-12-16 Thread Marc Perkel
jdow wrote: From: "Charles Gregory" Sent: Wednesday, 2009/December/16 07:49 On Tue, 15 Dec 2009, Chris Hoogendyk wrote: Marc Perkel wrote: http://www.vintage-computer.com/asr33.shtml There was actually a time when I had one of those in my house. For your amusement: I still have my ol

Re: Project Honeypot URLs

2009-12-16 Thread Gene Heskett
On Wednesday 16 December 2009, John Hardin wrote: >On Wed, 16 Dec 2009, James Butler wrote: >> Fire a photon torpedo and wait about 5 minutes to find out if you hit >> anything. > >"High Realism" mode? > Speed of light limitations you know. ;) -- Cheers, Gene "There are four boxes to be used in d

Re: OT: Museum piece...

2009-12-16 Thread Gene Heskett
On Wednesday 16 December 2009, Benny Pedersen wrote: >On ons 16 dec 2009 16:49:52 CET, Charles Gregory wrote > >> On Tue, 15 Dec 2009, Chris Hoogendyk wrote: >>> Marc Perkel wrote: http://www.vintage-computer.com/asr33.shtml >>> >>> There was actually a time when I had one of those in my house

RE: Cooperative data gathering project.

2009-12-16 Thread R-Elists
marc, what if there is no RDNS ? ;-) - rh

Re: emailreg.org - tainted white list

2009-12-16 Thread Yet Another Ninja
On 12/16/2009 6:16 PM, Charles Gregory wrote: On Wed, 16 Dec 2009, Yet Another Ninja wrote: blabber... checkout SVN - follow dev list... HABEAS is history... I believe the *point* here is that HABEAS is NOT 'history' for ordinary systems running ordinary sa-update on 3.2.5. they can adj

Re: Project Honeypot URLs

2009-12-16 Thread John Hardin
On Wed, 16 Dec 2009, James Butler wrote: Fire a photon torpedo and wait about 5 minutes to find out if you hit anything. "High Realism" mode? -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key:

Re: Project Honeypot URLs

2009-12-16 Thread James Butler
Alex wrote: > First, great conversation on the "historic" machines. My fondest > memory is of an 8080 CP/M machine I built with my dad that included > the cassette tape storage and later an 8" floppy drive. A very > rudimentary BASIC where we typed in sheets and sheets of code to play > a simple St

Re: Reminder:: 3.3.0 pre-release cut: December 17th

2009-12-16 Thread Warren Togami
http://tinyurl.com/yd8n96m All bugs targeted for 3.3.0. https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6228 Last bug currently P1 priority and considered a blocker. Warren Togami wtog...@redhat.com

RE: emailreg.org - tainted white list

2009-12-16 Thread Michael Hutchinson
> > The trouble with this is how often are these rules being re-examined > and re-evaluated? > > Not that often. HABEAS has been through three iterations since those > rules were set at −4 and −8. > > What is enabled by default should be the safest possible settings. > Relying on a third party t

Whitelists, not directly useful to spamassassin...

2009-12-16 Thread Warren Togami
I made a discovery today that surprised even myself. Using the rescore masscheck and weekly masscheck logs while working on Bug #6247 I found some interesting details that throws a wrench into this lively debate. https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6247#c49 https://issues.ap

Project Honeypot URLs

2009-12-16 Thread Alex
Hi all, First, great conversation on the "historic" machines. My fondest memory is of an 8080 CP/M machine I built with my dad that included the cassette tape storage and later an 8" floppy drive. A very rudimentary BASIC where we typed in sheets and sheets of code to play a simple Star Trek game

Re: emailreg.org - tainted white list

2009-12-16 Thread jdow
From: "LuKreme" Sent: Wednesday, 2009/December/16 07:56 On 16-Dec-2009, at 08:33, Mike Cardwell wrote: For what it's worth, I just ran sa-stats.pl against my last ten days of logs. The only mention of habeas was: 10HABEAS_ACCREDITED_SOI 367 1.450.00 17.36 So it h

Re: emailreg.org - tainted white list

2009-12-16 Thread jdow
From: "Mike Cardwell" Sent: Wednesday, 2009/December/16 07:33 On 16/12/2009 14:23, LuKreme wrote: uses. The only thing that really matters is how effective they are. If a blacklist blocks spammers without blocking too many legitimate mails, use it. If a whitelist allows legitimate mail wi

Re: emailreg.org - tainted white list

2009-12-16 Thread jdow
From: "Res" Sent: Wednesday, 2009/December/16 03:18 On Wed, 16 Dec 2009, Christian Brel wrote: On Wed, 16 Dec 2009 21:10:11 +1000 (EST) Res wrote: On Wed, 16 Dec 2009, Per Jessen wrote: Christian Brel wrote: Perhaps the time has come for a fork of Spamassassin where these commercial c

Re: Museum piece...

2009-12-16 Thread jdow
From: "Charles Gregory" Sent: Wednesday, 2009/December/16 07:49 On Tue, 15 Dec 2009, Chris Hoogendyk wrote: Marc Perkel wrote: http://www.vintage-computer.com/asr33.shtml There was actually a time when I had one of those in my house. For your amusement: I still have my old Commodore 64

Re: OT: Museum piece...

2009-12-16 Thread Charles Gregory
On Wed, 16 Dec 2009, Ted Mittelstaedt wrote: Those were the days. A few poke and peek commands, 15 minutes waiting for the cassette tape to load the pirated game... Biggest thrill for me was reverse-egineering the 'fast loader' code in one of the games so that I could create my own TSR that w

Re: OT: Museum piece...

2009-12-16 Thread Christian Brel
On Wed, 16 Dec 2009 11:05:18 -0800 Ted Mittelstaedt wrote: > Charles Gregory wrote: > > On Tue, 15 Dec 2009, Chris Hoogendyk wrote: > >> Marc Perkel wrote: > >>> http://www.vintage-computer.com/asr33.shtml > >> There was actually a time when I had one of those in my house. > > > > For your amu

Re: OT: Museum piece...

2009-12-16 Thread Ted Mittelstaedt
Charles Gregory wrote: On Tue, 15 Dec 2009, Chris Hoogendyk wrote: Marc Perkel wrote: http://www.vintage-computer.com/asr33.shtml There was actually a time when I had one of those in my house. For your amusement: I still have my old Commodore 64 and 1541 drive sitting in the basement. One

Re: Cooperative data gathering project.

2009-12-16 Thread Marc Perkel
Mike Cardwell wrote: On 16/12/2009 15:37, Marc Perkel wrote: I have an idea for a cooperative data gathering project and it's similar to what we at Junk Email Filter are doing internally. The idea to that a number of you on the list who run a large spam filtering operation send one line me

3.3.0-beta1: What is wrong with my usage of SYSCONFDIR

2009-12-16 Thread Jens Schleusener
Hi, to install Mail-SpamAssassin SVN versions (and now Mail-SpamAssassin 3.3.0-beta1) I use the command perl Makefile.PL PREFIX=~/sausr_svn SYSCONFDIR=~/saetc_svn but I detect always the following output lines after that command is claiming about some missing only optional modules: warni

Re: Cooperative data gathering project.

2009-12-16 Thread Mike Cardwell
On 16/12/2009 15:37, Marc Perkel wrote: > I have an idea for a cooperative data gathering project and it's similar > to what we at Junk Email Filter are doing internally. The idea to that a > number of you on the list who run a large spam filtering operation send > one line messages reporting IP a

Re: HTML in Messages

2009-12-16 Thread John Hardin
On Wed, 16 Dec 2009, Marc Perkel wrote: I had thought that at one time I already set it to text only on this list and I had. But that was before the list name changed many years ago. I'm been on this list since 2001. _thank_ you for turning off the HTML, Marc. -- John Hardin KA7OHZ

Re: emailreg.org - tainted white list

2009-12-16 Thread Charles Gregory
On Wed, 16 Dec 2009, Yet Another Ninja wrote: blabber... checkout SVN - follow dev list... HABEAS is history... I believe the *point* here is that HABEAS is NOT 'history' for ordinary systems running ordinary sa-update on 3.2.5. My rules (in /var/lib/spamassassin) still include the stron

Re: OT: Weird characters in Pine

2009-12-16 Thread Martin Gregorie
On Wed, 2009-12-16 at 10:55 -0500, Charles Gregory wrote: > On Tue, 15 Dec 2009, John Hardin wrote: > > I generally use PINE > > > > {researches a bit} Hmmm. It only appears to happen when non-ASCII > > characters are in the message I'm replying to. > > OT: Seeing how you seem to have some pa

Re: DKIM.pm error

2009-12-16 Thread Mark Martinec
On Wednesday 16 December 2009 17:04:55 LuKreme wrote: > While looking through my logs I ran across a bunch of these errors: > > spamd[38076]: Use of uninitialized value $detail in string eq at > /usr/local/lib/perl5/site_perl/5.10.0/Mail/SpamAssassin/Plugin/DKIM.pm > line 393. > > They seem to

Re: OT: Museum piece...

2009-12-16 Thread Benny Pedersen
On ons 16 dec 2009 16:49:52 CET, Charles Gregory wrote On Tue, 15 Dec 2009, Chris Hoogendyk wrote: Marc Perkel wrote: http://www.vintage-computer.com/asr33.shtml There was actually a time when I had one of those in my house. For your amusement: I still have my old Commodore 64 and 1541 dri

Re: dkim whitelisting

2009-12-16 Thread Jeff Mincy
From: LuKreme Date: Wed, 16 Dec 2009 08:23:23 -0700 I'm adding address book users into the user_prefs files, but without the signing domain this is useless and emails for my users are still getting tagged up as spam (these in particular score 7-10 points without the whitelist).

DKIM.pm error

2009-12-16 Thread LuKreme
While looking through my logs I ran across a bunch of these errors: spamd[38076]: Use of uninitialized value $detail in string eq at /usr/local/lib/perl5/site_perl/5.10.0/Mail/SpamAssassin/Plugin/DKIM.pm line 393. They seem to be a few times a day. -- "Conservatives want live babies so they

Re: emailreg.org - tainted white list

2009-12-16 Thread Charles Gregory
On Tue, 15 Dec 2009, J.D. Falk wrote: Which finally brings us back to the core questions which seem to go unanswered: They've all been answered many times, in other threads. Perhaps I missed the messages, but it seems to me that the deep issues are *debated* a little, but never really answere

OT: Weird characters in Pine

2009-12-16 Thread Charles Gregory
On Tue, 15 Dec 2009, John Hardin wrote: I generally use PINE {researches a bit} Hmmm. It only appears to happen when non-ASCII characters are in the message I'm replying to. OT: Seeing how you seem to have some passing acquaintance with ASCII character set issues, I thought I would ask i

Re: emailreg.org - tainted white list

2009-12-16 Thread LuKreme
On 16-Dec-2009, at 08:33, Mike Cardwell wrote: > For what it's worth, I just ran sa-stats.pl against my last ten days of logs. > The only mention of habeas was: > > 10HABEAS_ACCREDITED_SOI 367 1.450.00 17.36 > > So it hit on 17.36% of my Ham, and 0% of my Spam. With

Re: dkim whitelisting

2009-12-16 Thread Mark Martinec
On Wednesday 16 December 2009 16:23:23 LuKreme wrote: > Given the following header: > > DKIM-Signature: v=1; a=rsa-sha1; d=bluehornet.com; s=bluehornet-1.bh; > c=relaxed/simple; q=dns/txt; i...@bluehornet.com; t=1258661618; > h=From:Subject:X-Outgoing:Date; > bh=3HPqQ2/9JeqpKI5xZpBSBX

Re: dkim whitelisting

2009-12-16 Thread Benny Pedersen
On ons 16 dec 2009 16:23:23 CET, LuKreme wrote whitelist_from_dkim *...@buffetsinc.com bluehornet.com the correct syntax for whitelisting these emails? syntax is ok, but i would not use whitelist_from_dkim with a willcard domain, imho its better to def_whitelist_from_dkim *...@buffetsinc.com

Re: Reminder:: 3.3.0 pre-release cut: December 17th

2009-12-16 Thread Warren Togami
On 12/16/2009 08:59 AM, Kevin A. McGrail wrote: It was a good catch that RNBL replaced SSBL but I don't see this as a 3.3.0 P1 issue. Same thing with HABEAS/BSP. Can't these be handled in normal course with GA and then sa-update? I worry we are hurrying these too much. I rather use this opportu

OT: Museum piece...

2009-12-16 Thread Charles Gregory
On Tue, 15 Dec 2009, Chris Hoogendyk wrote: Marc Perkel wrote: http://www.vintage-computer.com/asr33.shtml There was actually a time when I had one of those in my house. For your amusement: I still have my old Commodore 64 and 1541 drive sitting in the basement. One year my daughter's scho

Re: HTML in Messages

2009-12-16 Thread Marc Perkel
Charles Gregory wrote: On Tue, 15 Dec 2009, Marc Perkel wrote: I found the text only list and I originally had it set to just spamassassin.org rather that spamassassin.apache.org so this should help those on the list reading their email with a KSR33 teletype on a 110 baud acoustic modem use

Re: HTML in Messages

2009-12-16 Thread Charles Gregory
On Tue, 15 Dec 2009, Marc Perkel wrote: I found the text only list and I originally had it set to just spamassassin.org rather that spamassassin.apache.org so this should help those on the list reading their email with a KSR33 teletype on a 110 baud acoustic modem use less paper when reading th

Re: icontact random tracking urls and scoring on unwanted TLDs

2009-12-16 Thread Charles Gregory
On Tue, 15 Dec 2009, Chris Santerre wrote: A few months back there was a wave of spam coming from abused Polish .pl TLD. It seems iContact uses random generated directories in thier tracking URLs that contain a period. Yup... you guessed it... incontact/a.pl/ means it hits the rule. The

Cooperative data gathering project.

2009-12-16 Thread Marc Perkel
I have an idea for a cooperative data gathering project and it's similar to what we at Junk Email Filter are doing internally. The idea to that a number of you on the list who run a large spam filtering operation send one line messages reporting IP addresses with a key word like spam, ham, or o

Re: Whitelists in SA

2009-12-16 Thread LuKreme
On 16-Dec-2009, at 08:03, Marc Perkel wrote: > Res wrote: >> >> no whitelist should ever become default part of SA >> >> the day it is, is the day I look elsewhere. > > Why shouldn't white lists become part of SA? Blacklists are part of SA. My > hostkarma whitelists are one of the things that k

Re: emailreg.org - tainted white list

2009-12-16 Thread Mike Cardwell
On 16/12/2009 14:23, LuKreme wrote: uses. The only thing that really matters is how effective they are. If a blacklist blocks spammers without blocking too many legitimate mails, use it. If a whitelist allows legitimate mail without sending through too many spams, use it. Even lists that hav

RE: Dear Santa

2009-12-16 Thread R-Elists
> > Axb > PS: If JM posts a link to his Amazon wishlist, maybe we can > all help him decorate the new place :-) > > > +1 - rh

RE: emailreg.org - tainted white list

2009-12-16 Thread Charles Gregory
On Tue, 15 Dec 2009, jdow wrote: Three points: 1) It is known this list is read by spammers to learn what we are doing. I've verified this with "challenge/response" tactics including taunting more than once. Sh! They'll hear you! :) 2) On several occasions now Richard has tried to torpedo

RE: Spam from compromised web mails

2009-12-16 Thread R-Elists
> > When running site wide, how do you get ham to train bayes? I > can manage spam by spam reporting and such, but getting ham > without breaching the privacy of our users is my problem. > > raj > Raj, one potential option is to setup bayes autolearn thresholds with proper scores for your

dkim whitelisting

2009-12-16 Thread LuKreme
Given the following header: DKIM-Signature: v=1; a=rsa-sha1; d=bluehornet.com; s=bluehornet-1.bh; c=relaxed/simple; q=dns/txt; i...@bluehornet.com; t=1258661618; h=From:Subject:X-Outgoing:Date; bh=3HPqQ2/9JeqpKI5xZpBSBX0GumA=; b=XpEFvxW0dFfl5OlV5dHIU8Ni6rwDsdZc6VtH

Re: Reminder:: 3.3.0 pre-release cut: December 17th

2009-12-16 Thread Justin Mason
On Wed, Dec 16, 2009 at 13:59, Kevin A. McGrail wrote: > It was a good catch that RNBL replaced SSBL but I don't see this as a 3.3.0 > P1 issue. Same thing with HABEAS/BSP. Can't these be handled in normal > course with GA and then sa-update? I worry we are hurrying these too much. > > > This

Bug in Hostkarma black list found

2009-12-16 Thread Marc Perkel
I found a bug in the way my Hostkarna blacklist generates the list which led to some false positives. There are servers that look like spammers sometimes but lomg term data and white listing and nobl listing was supposed to keep these servers off our black list. However what was happening is th

RE: [sa] RE: emailreg.org - tainted white list

2009-12-16 Thread R-Elists
> Still doesn't answer my question. Perhaps I'm "dense". But to > spell out my question more explicitly: > > what do you mean by "personal response spam"? Is that just > Richard's on-list responses we've all seen? Or something > else? (did I miss that part of the conversation?). And what >

Re: emailreg.org - tainted white list

2009-12-16 Thread Christian Brel
On Wed, 16 Dec 2009 08:39:25 -0600 "McDonald, Dan" wrote: > On Dec 16, 2009, at 8:13 AM, "Bowie Bailey" > wrote: > > > Christian Brel wrote: > >> The point comes back to this and it has *not* been answered > >> sensibly; WHY DOES SPAMASSASSIN DEFAULT INSTALL WITH A NEGATIVE > >> SCORING RULE

Re: Spam from compromised web mails

2009-12-16 Thread Thomas Harold
On 12/16/2009 9:42 AM, Rajkumar S wrote: On Wed, Dec 16, 2009 at 1:07 PM, Yet Another Ninja wrote: I don't do any "manual" training, ever. SA's butler, "autolearn", does it for me. bayes_auto_learn 1 In this case if a new spam comes and it does not score on any other rules, Would't this be

Re: URLRedirect.pm & Short URL Providers RBL List

2009-12-16 Thread Jonas Eckerman
Jonas Eckerman wrote: At the time I mentioned that I planned to add support for that list in my URLRedirect plugin. That support is there, and it seems to be working. Of course I forgot to include where the module can be found... It's available at

Whitelists in SA

2009-12-16 Thread Marc Perkel
Res wrote: no whitelist should ever become default part of SA the day it is, is the day I look elsewhere. Why shouldn't white lists become part of SA? Blacklists are part of SA. My hostkarma whitelists are one of the things that keeps me in business because my false positive rates are f

Re: Spam from compromised web mails

2009-12-16 Thread Rajkumar S
On Wed, Dec 16, 2009 at 1:07 PM, Yet Another Ninja wrote: > I don't do any "manual" training, ever. SA's butler, "autolearn", does it > for me. > > bayes_auto_learn  1 In this case if a new spam comes and it does not score on any other rules, Would't this be classified as a ham? Also I need bayes

Re: emailreg.org - tainted white list

2009-12-16 Thread McDonald, Dan
On Dec 16, 2009, at 8:13 AM, "Bowie Bailey" wrote: Christian Brel wrote: The point comes back to this and it has *not* been answered sensibly; WHY DOES SPAMASSASSIN DEFAULT INSTALL WITH A NEGATIVE SCORING RULE THAT FAVOURS A COMMERCIAL BULK MAILER. Namely the negative score for Habeas?

Re: Site-wide Bayes

2009-12-16 Thread Michael Scheidell
On 12/16/09 9:27 AM, Thomas Harold wrote: I'm guessing that you'd also want to change the autolearn thresholds to be stricter? Like only auto-learning if it scores below -2 or above +10? (That might be an amavisd-new feature.) I still use 0, but have the high score at +15. watch the 'sa-lea

Re: Spam from compromised web mails

2009-12-16 Thread Thomas Harold
On 12/15/2009 12:49 PM, LuKreme wrote: On 15-Dec-2009, at 09:12, RW wrote: On Tue, 15 Dec 2009 09:44:50 -0500 I'm exactly the opposite, hardly any of the lists I subscribe to do that, and I find it annoying when it's done. Every list mail comes with a List-Id header so you can filter, tag or wh

Re: emailreg.org - tainted white list

2009-12-16 Thread Yet Another Ninja
On 12/16/2009 3:23 PM, LuKreme wrote: On 16-Dec-2009, at 07:12, Bowie Bailey wrote: uses. The only thing that really matters is how effective they are. If a blacklist blocks spammers without blocking too many legitimate mails, use it. If a whitelist allows legitimate mail without sending thro

Re: Site-wide Bayes

2009-12-16 Thread Thomas Harold
On 12/15/2009 11:55 AM, Michael Scheidell wrote: On 12/15/09 11:49 AM, Charles Gregory wrote: On Tue, 15 Dec 2009, Matt Garretson wrote: Heartily agreed. Site-wide bayes here (single database for 2000+ users) catches 40% of the spam here. But what is the FP rate? Is it safe for an ISP with a

Re: Sieve mailing list rules (was Spam from compromised web mails)

2009-12-16 Thread Thomas Harold
On 12/15/2009 9:54 AM, Benny Pedersen wrote: On tir 15 dec 2009 15:44:50 CET, Jeff Koch wrote in has a tag. A tag of two characters would allow users to quickly identify the email as coming from the SA mailing list and decide whether the email is worth opening. in the header: List-Id: in s

Re: emailreg.org - tainted white list

2009-12-16 Thread LuKreme
On 16-Dec-2009, at 07:12, Bowie Bailey wrote: > uses. The only thing that really matters is how effective they are. If > a blacklist blocks spammers without blocking too many legitimate mails, > use it. If a whitelist allows legitimate mail without sending through > too many spams, use it. Even

Re: icontact random tracking urls and scoring on unwanted TLDs

2009-12-16 Thread RW
On Tue, 15 Dec 2009 14:37:15 -0500 Chris Santerre wrote: > It seems iContact uses random generated directories in thier tracking > URLs that contain a period. Yup... you guessed it... > incontact/a.pl/ means it hits the rule. I've contacted them > about the folly. They seemed receptive.

Re: emailreg.org - tainted white list

2009-12-16 Thread Bowie Bailey
Christian Brel wrote: > The point comes back to this and it has *not* been answered sensibly; > WHY DOES SPAMASSASSIN DEFAULT INSTALL WITH A NEGATIVE SCORING RULE THAT > FAVOURS A COMMERCIAL BULK MAILER. Namely the negative score for Habeas? > This point has been answered. SA ships with that r

URLRedirect.pm & Short URL Providers RBL List

2009-12-16 Thread Jonas Eckerman
Hi! In November Marc Perkel announcend a trial of a DNS based list of short URL providers. At the time I mentioned that I planned to add support for that list in my URLRedirect plugin. That support is there, and it seems to be working. This module follows URLs (in parallel, using HEAD reques

Re: Reminder:: 3.3.0 pre-release cut: December 17th

2009-12-16 Thread Kevin A. McGrail
It was a good catch that RNBL replaced SSBL but I don't see this as a 3.3.0 P1 issue. Same thing with HABEAS/BSP. Can't these be handled in normal course with GA and then sa-update? I worry we are hurrying these too much. This is a reminder of the goal to cut another pre-release December 17t

Re: emailreg.org - tainted white list

2009-12-16 Thread Benny Pedersen
On ons 16 dec 2009 12:10:11 CET, Res wrote no whitelist should ever become default part of SA, the day it is, is the day > I look elsewhere. please post on this maillist what you do when you find replacement for sa -- xpoint http://www.unicom.com/pw/reply-to-harmful.html

Dear Santa

2009-12-16 Thread Yet Another Ninja
Dear Santa, SA users hope Justin Mason has moved into his newly renovated home and he find the time & energy to bring the SOUGHT rule magic back to us. As this is an Xmas wish, we hope you, Santa Claus, will help him. Axb PS: If JM posts a link to his Amazon wishlist, maybe we can all help h

Re: emailreg.org - tainted white list

2009-12-16 Thread Res
On Wed, 16 Dec 2009, Christian Brel wrote: On Wed, 16 Dec 2009 21:10:11 +1000 (EST) Res wrote: On Wed, 16 Dec 2009, Per Jessen wrote: Christian Brel wrote: Perhaps the time has come for a fork of Spamassassin where these commercial considerations are not so obvious? No need for such dra

Re: emailreg.org - tainted white list

2009-12-16 Thread Per Jessen
Res wrote: > On Wed, 16 Dec 2009, Per Jessen wrote: > >> Christian Brel wrote: >> >>> Perhaps the time has come for a fork of Spamassassin where these >>> commercial considerations are not so obvious? >> >> No need for such drastic measures - it's only a ruleset. > > > no whitelist should ever

Re: emailreg.org - tainted white list

2009-12-16 Thread Christian Brel
On Wed, 16 Dec 2009 21:10:11 +1000 (EST) Res wrote: > On Wed, 16 Dec 2009, Per Jessen wrote: > > > Christian Brel wrote: > > > >> Perhaps the time has come for a fork of Spamassassin where these > >> commercial considerations are not so obvious? > > > > No need for such drastic measures - it's o

Re: emailreg.org - tainted white list

2009-12-16 Thread Res
On Wed, 16 Dec 2009, Per Jessen wrote: Christian Brel wrote: Perhaps the time has come for a fork of Spamassassin where these commercial considerations are not so obvious? No need for such drastic measures - it's only a ruleset. no whitelist should ever become default part of SA the day