Re: Nonsense spam

2010-06-24 Thread RW
On Thu, 24 Jun 2010 15:59:24 -0400 Michael Scheidell wrote: > On 6/24/10 3:51 PM, Ned Slider wrote: > > The danger comes when people use the PBL incorrectly and deep parse > > all headers which *will* lead to copious FPs. > > > > Either way, I'd have no hesitation blocking outright on PBL or > >

Re: Nonsense spam

2010-06-24 Thread Michael Scheidell
On 6/24/10 3:51 PM, Ned Slider wrote: The danger comes when people use the PBL incorrectly and deep parse all headers which *will* lead to copious FPs. Either way, I'd have no hesitation blocking outright on PBL or scoring very highly in SA. since the PBL also lists 'dialups'. and if a dial

Re: Nonsense spam

2010-06-24 Thread Yet Another Ninja
On 2010-06-24 21:51, Ned Slider wrote: Michael Scheidell wrote: On 6/24/10 1:18 PM, Randy Ramsdell wrote: Yet spamassassin scores it with a .9. I have been reluctant to block and this is compounded by spamassassin scoring it low as if it weren't as accurate as you state. again, look at

Re: Nonsense spam

2010-06-24 Thread Ned Slider
Michael Scheidell wrote: On 6/24/10 1:18 PM, Randy Ramsdell wrote: Yet spamassassin scores it with a .9. I have been reluctant to block and this is compounded by spamassassin scoring it low as if it weren't as accurate as you state. again, look at the circumstances. the SA scoring migh

Re: Nonsense spam

2010-06-24 Thread Michael Scheidell
On 6/24/10 1:18 PM, Randy Ramsdell wrote: Yet spamassassin scores it with a .9. I have been reluctant to block and this is compounded by spamassassin scoring it low as if it weren't as accurate as you state. again, look at the circumstances. the SA scoring might be crippled due to the

Re: Nonsense spam

2010-06-24 Thread Randy Ramsdell
Michael Scheidell wrote: > On 6/24/10 12:07 PM, Randy Ramsdell wrote: >> Anyone receiving these? It is either a borked spam script or they are >> probing. They come in with different headers and different body each >> time so I am not sure how to mark or block them. Any suggestions would >> be appr

Re: Nonsense spam

2010-06-24 Thread Michael Scheidell
On 6/24/10 12:07 PM, Randy Ramsdell wrote: Anyone receiving these? It is either a borked spam script or they are probing. They come in with different headers and different body each time so I am not sure how to mark or block them. Any suggestions would be appreciated. http://pastebin.com/kQJ0SPt

RE: Scanning attachments with spamassassin

2010-06-24 Thread Sharma, Ashish
Frank, So if I am correct, the body rules are applied once all the email is demimed and if the demimed content is in text that the rule can lock on then the rule hits. Moreover since I am writing custom rules for spamassassin can you point me to good references where I can understand how spama

Problems importing Bayes DB into MySQL Cluster

2010-06-24 Thread David Sanchez Herrero
Hi all, I'm trying to import a Bayes database from one server to another. The first one has the bayes database in disk files, and the second one uses a MySQL Cluster. To import, I'm using the "sa-learn -D --restore backup.txt" command with SpamAssassin 3.2.5 in an OpenSuse 11.2 x86_64 machine, bu