Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread Niamh Holding
Hello Darxus, Wednesday, October 31, 2012, 10:34:42 PM, you wrote: dcc> They're talking about automated score generation. Currently, apparently, dcc> the scores for this rule are fixed, and not included in the calculation of dcc> ideal scores. So currently submitting the ham to the corpus won'

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread darxus
On 10/31, jdow wrote: > On 2012/10/31 14:05, John Hardin wrote: > >On Wed, 31 Oct 2012, Kevin A. McGrail wrote: > > > >>> Shouldn't it be set via GA in 72_scores.cf ? > >> > >>Doesn't sound like a bad idea to comment it in 50_scores.cf and let it > >>float. > > > >+1. That's what threw me when I d

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread jdow
On 2012/10/31 14:05, John Hardin wrote: On Wed, 31 Oct 2012, Kevin A. McGrail wrote: Shouldn't it be set via GA in 72_scores.cf ? Doesn't sound like a bad idea to comment it in 50_scores.cf and let it float. +1. That's what threw me when I did my quickie analysis early on. RaaallY? W

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread John Hardin
On Wed, 31 Oct 2012, Kevin A. McGrail wrote: Shouldn't it be set via GA in 72_scores.cf ? Doesn't sound like a bad idea to comment it in 50_scores.cf and let it float. +1. That's what threw me when I did my quickie analysis early on. -- John Hardin KA7OHZhttp://www.imp

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread Kevin A. McGrail
wondering score HK_LOTTO 3.599 2.755 2.993 3.599 should this score be in hardwired in 50_scores.cf ? Shouldn't it be set via GA in 72_scores.cf ? Doesn't sound like a bad idea to comment it in 50_scores.cf and let it float. regards, KAM

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread darxus
On 10/31, Niamh Holding wrote: > A> if you provide a few dozen samples of these hammy msgs , they can be > A> included in the SA ham corpus > > That can be supplied, an mbox of a good supply do? > > A> you can directly contribute to rescoring by running a masscheck instance > A> as per: > A> htt

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread Niamh Holding
Hello Axb, Wednesday, October 31, 2012, 3:21:27 PM, you wrote: A> if you provide a few dozen samples of these hammy msgs , they can be A> included in the SA ham corpus That can be supplied, an mbox of a good supply do? A> you can directly contribute to rescoring by running a masscheck instanc

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread Axb
On 10/31/2012 06:11 PM, Kevin A. McGrail wrote: On 10/31/2012 12:07 PM, Niamh Holding wrote: Wednesday, October 31, 2012, 3:56:32 PM, you wrote: KAM> However, it seems that your configuration is using rules outside the KAM> project (which I author) and that has no bearing on SA. The rule under

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread Kevin A. McGrail
On 10/31/2012 12:07 PM, Niamh Holding wrote: Wednesday, October 31, 2012, 3:56:32 PM, you wrote: KAM> However, it seems that your configuration is using rules outside the KAM> project (which I author) and that has no bearing on SA. The rule under discussion is HK_LOTTO which is defined in 72_ac

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread Ned Slider
On 31/10/12 15:21, Axb wrote: On 10/31/2012 04:13 PM, Niamh Holding wrote: Hello Andy, Wednesday, October 31, 2012, 2:22:10 PM, you wrote: AJ> Your message scored a 7.1 on my system. Not a good score for ham :) AJ> 0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email But it isn't... maybe 2 r

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread Niamh Holding
Hello John, Wednesday, October 31, 2012, 4:11:13 PM, you wrote: JH> Unfortunately there doesn't appear to be a really reliable way to do that. Last external rdns =~ /mailcontrol\.com/ Unless we think that the UK lottery's mail provider will also be sending lottery spam? -- Best regards, Nia

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread John Hardin
On Wed, 31 Oct 2012, Niamh Holding wrote: But it isn't... maybe 2 rules need amending so they don't hit genuine UK national lottery ham. Unfortunately there doesn't appear to be a really reliable way to do that. There was neither valid SPF nor valid DKIM on that message that would allow the

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread Niamh Holding
Hello Kevin, Wednesday, October 31, 2012, 3:56:32 PM, you wrote: KAM> However, it seems that your configuration is using rules outside the KAM> project (which I author) and that has no bearing on SA. The rule under discussion is HK_LOTTO which is defined in 72_active.cf which I'm sure is part o

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread Kevin A. McGrail
On 10/31/2012 11:50 AM, Niamh Holding wrote: Again doesn't solve the problem of these rules hitting ham, the proper solution is for the ruled to be amended. In general, there are rules that CAN'T help hitting some ham which is why a rule is used in a scoring framework to determine the overall sc

Re: Spamd checker script

2012-10-31 Thread Ted Mittelstaedt
I run the following once an hour out of cron on my FreeBSD mailserver, the echos are merely stuff the log and aren't necessary. You could easily delete them: $ cat /root/spamdwatch.sh #!/bin/sh if ps -p `cat /var/run/spamd/spamd.pid` > /dev/null; then echo spamd is running else echo spamd i

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread Niamh Holding
Hello Axb, Wednesday, October 31, 2012, 3:21:27 PM, you wrote: A> maybe you just lower the score for your setup. Which doesn't stop these rules hitting ham. A> and rethink A> A> required=4.5 That's only 0.5 under the default threshold. A> if you provide a few dozen samples of these hammy msg

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread Axb
On 10/31/2012 04:13 PM, Niamh Holding wrote: Hello Andy, Wednesday, October 31, 2012, 2:22:10 PM, you wrote: AJ> Your message scored a 7.1 on my system. Not a good score for ham :) AJ> 0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email But it isn't... maybe 2 rules need amending so they don'

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread Niamh Holding
Hello Andy, Wednesday, October 31, 2012, 2:22:10 PM, you wrote: AJ> Your message scored a 7.1 on my system. Not a good score for ham :) AJ> 0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email But it isn't... maybe 2 rules need amending so they don't hit genuine UK national lottery ham. -- Bes

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread Andy Jezierski
Niamh Holding wrote on 10/30/2012 12:47:12 PM: > From: Niamh Holding > To: users@spamassassin.apache.org, > Date: 10/30/2012 12:47 PM > Subject: HK_LOTTO hitting ham from the UK national lottery > > > > > http://pastebin.com/download.php?i=CmE661yf > > -- > Best regards, > Niamh

Spamd checker script

2012-10-31 Thread Troy McBride
I am trying to write a script that takes an array of server names and pings their spamd to make sure that it is still alive. $t = new Net::Telnet(Prompt=>'//', Port=> 783, output_log=>"out_log.txt", input_log=>"in_log.txt"); for($i=0;$i<$count;$i++) { $t -> open(@server_list[$i]); $line =

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread Niamh Holding
Hello Alexandre, Wednesday, October 31, 2012, 12:04:49 PM, you wrote: AB> Well as far as I know, if your SA instance restart after sa-update, it AB> should find the most recent and up to date ruleset. sa-update -D --gpgkey 6C6191E3 --channel sought.rules.yerp.org --channel updates.spamassassin

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread Alexandre Boyer
Hello, Well as far as I know, if your SA instance restart after sa-update, it should find the most recent and up to date ruleset. Did you restart your instance? if you use amavis, restart it as well. You may want to remove the ancient (theoritacally unsued) rulesets in /var/lib/spamassassin in o

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread Niamh Holding
Hello John, Tuesday, October 30, 2012, 7:13:05 PM, you wrote: JH> Frack. grepped without looking closely enough. Sorry! Even more fun is that this thread hits HK_LOTTO as well! -- Best regards, Niamhmailto:ni...@fullbore.co.uk pgpveLrlipDXC.pgp Description: PGP s

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread Niamh Holding
Hello Niamh, Tuesday, October 30, 2012, 7:18:23 PM, you wrote: NH> However it seems spamassassin is using this rule from the older NH> /var/lib/spamassassin/3.003001 No, it's there in 3.32 as well... I was grepping in the wrong place! -- Best regards, Niamhmailto: