Re: New spam-to me-and how do I stop.

2009-01-06 Thread Bob McClure Jr
ey hit BAYES_99, but not enough other rules to go over the edge. # These are designed to handle that. header __RLM_RCVD_FROM_AOL Received =~ /from .*\.aol\.com/ header __RLM_FROM_AIM_USER From =~ /\...@aim\.com/ meta RLM_AIM_SPAM (__RLM_RCVD_FROM_AOL && __RLM_FROM_AIM_USER) # Most of thi

Re: had it with spaces spam and idiots at hotmail

2008-10-29 Thread Bob McClure Jr
Phone: 561-999-5000, x 1259 > > *| *SECNAP Network Security Corporation > >* Certified SNORT Integrator >* King of Spam Filters, SC Magazine 2008 >* Information Security Award 2008, Info Security Products Guide >* CRN Magazine Top 40 Emerging Security Vendors C

Re: Strange behavior - load high when scanning mail from one specific user

2008-10-09 Thread Bob McClure Jr
magic I think it complained about a DB version mismatch or something like that. There's probably a more elegant solution, but we renamed (or deleted) his bayes_* files, and that cured the problem, though he had to start over on Bayes. Cheers, -- Bob McClure, Jr. Bobcat Ope

Re: Mailer DAEMON Returns && Body Check on Multipart

2008-08-25 Thread Bob McClure Jr
make install" if the build directory is still lying about). > I yet downloaded 3.2.4 and run perl Makefiel.PL without installing. This > for example starts telling me, that modules like SPF are not > present. Any hints on that? The SPF modules are not required, but helpful. You can in

Re: [OT] Odd spammer tactic?

2008-07-22 Thread Bob McClure Jr
On Tue, Jul 22, 2008 at 08:38:09PM +0200, mouss wrote: > Bob McClure Jr wrote: > >On Tue, Jul 22, 2008 at 11:37:39AM -0400, Kevin Parris wrote: > >> > >> > >>The spammers are spending other people's money, since much of their > >>"work&q

Re: [OT] Odd spammer tactic?

2008-07-22 Thread Bob McClure Jr
ere are probably only two chances of that - slim and none. > > > -- > Christopher Bort > <[EMAIL PROTECTED]> > <http://www.thehundredacre.net/> Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com

Re: general questions abour spamc/spamd

2008-05-02 Thread Bob McClure Jr
o spamd. Then spamd filters it and returns it with the desired spam markup. > then how does it cycle to get to the recipient client?? After it comes back from spamc, what happens depends on the following procmail "recipes". You can divert it, delete it (to /dev/null), or send it on to

Re: logrotate query !

2008-03-03 Thread Bob McClure Jr
it get deleted frm the system?? Yes, everything ripples down like this: log.3 becomes log.4 (the old log.4 falls into the bit bucket) log,2 becomes log.3 log.1 becomes log.2 log becomes log.1 and a new log is created. > -- > Regards > Agnello Dsouza > www.linux-vashi.blogspot.com > www.bible-study-india.blogspot.com Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com For great is your love, reaching to the heavens; your faithfulness reaches to the skies. Psalm 57:10 (NIV)

Re: Logging with SA/procmail standalone (no spamd)

2008-01-29 Thread Bob McClure Jr
never can log to someplace like /var/log. Is there any reason you can't run spamd (which can log, usually to someplace like /var/log/maillog) and have procmail call spamc instead of spamassassin? Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] h

Re: exclude emails with Japanese chars [not spam]

2007-11-21 Thread Bob McClure Jr
s. If it should apply site-wide, put it in /etc/mail/spamassassin/local.cf and restart MailScanner. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com Then Jesus said, "Did I not tell you that if you believed, you would se

Re: Maillog shows a few errors

2007-11-17 Thread Bob McClure Jr
at > /etc/spamassassin/FuzzyOcr.pm line 63. > Nov 17 00:38:22 bcl00641 spamd[21562]: Subroutine fuzzyocr_do redefined at > /etc/spamassassin/FuzzyOcr.pm line 101. > Nov 17 00:38:22 bcl00641 spamd[21562]: Can't locate object method > "word_is_in_dictionary" via packag

Re: re the 419 scam apologizing for 419 scams

2007-09-13 Thread Bob McClure Jr
ual) plug on it. He's not turned on again until he tells us he has cleaned his machine. > That might mean > shutting down the legitimate client too, and they could try to sue for lack > of service. I believe that is covered in the Terms Of Service that the subscriber agree

Re: Maybe I'm dense...

2007-09-06 Thread Bob McClure Jr
in context: > http://www.nabble.com/Maybe-I%27m-dense...-tf4393677.html#a12527794 > Sent from the SpamAssassin - Users mailing list archive at Nabble.com. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com May the Lo

Re: OT blacklist check

2007-08-28 Thread Bob McClure Jr
te host Is just a single mail server (or set of servers) dropping you? Maybe you are on their local blacklist. I've had several problems like that with mxlogic.{net,com} servers. If so, you will have to look them up and give them a ringy-dingy and anything else that's appropriate. Cheers, --

Re: Using SpamAssassin to filter port 110

2007-08-20 Thread Bob McClure Jr
l or similar, and deliver to your local mailboxw with procmail. Then you can run spamd and call spamc from each user's .procmailrc. The SA distribution includes examples of how to do that. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://ww

Re: Post cart spams

2007-07-17 Thread Bob McClure Jr
On Wed, Jul 18, 2007 at 03:42:31AM +0300, Jari Fredriksson wrote: > Bob McClure Jr wrote: > >I installed clamassassin > > What a dumb name for software. Does it want to assassin ClamAV? I think its intention was to make ClamAV as easy to use as SpamAssassin, and it succeeds very

Re: Post cart spams

2007-07-17 Thread Bob McClure Jr
snip 8<- Of course you can divert it to some quarantine bin, instead of /dev/null. Be sure to set up ClamAV as daemon or stand-alone first, before you build clamassassin. clamassassin figures out for itself whether it needs to call clamscan or clamdscan during the build process

Re: sa-learn --forget

2007-07-13 Thread Bob McClure Jr
it been learned as spam, that will automatically forget its spamminess and learn it as ham. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com Who is a God like you, who pardons sin and forgives the transgression of the remnant o

Re: Confused about which bayes db gets used with spamc?

2007-06-30 Thread Bob McClure Jr
iew this message in context: > http://www.nabble.com/Confused-about-which-bayes-db-gets-used-with-spamc--tf4004657.html#a11373245 > Sent from the SpamAssassin - Users mailing list archive at Nabble.com. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] htt

Re: Setting up an email rule for these posts

2007-05-15 Thread Bob McClure Jr
ay, that perhaps every email/post that > goes out, has the word Spamassassin in the subject line > ? Turn on full headers and you will see a line: List-Id: Filter on that. That works with many lists. > Any help appreciated. > > Chris. Cheers, -- Bob McClure, Jr.

Re: Increase of spam?

2007-05-03 Thread Bob McClure Jr
On Thu, May 03, 2007 at 09:13:33AM -0800, John Andersen wrote: > On Thursday 03 May 2007, Bob McClure Jr wrote: > >  If he has a legit mail > > server, then he should trace back to the client > > Yes, its widely known that every mail system administrator has > hours of i

Re: Increase of spam?

2007-05-03 Thread Bob McClure Jr
the Received lines. If he has a legit mail server, then he should trace back to the client that sent to his server, and ultimately shut the blighter down. I do that for mailing list postings I have to moderate on a list server I don't control, and mail sent to postmaster at my domain. Am I not co

Re: Fowarding spams to the list.... Not good???

2007-04-30 Thread Bob McClure Jr
r sees SA List traffic. > Eric J. Goforth > [EMAIL PROTECTED] Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com For since the creation of the world God's invisible qualities -- his eternal power and divine nature -- h

Re: cannot install it on BSD

2007-04-28 Thread Bob McClure Jr
On Sun, Apr 29, 2007 at 01:00:10AM +0800, Mailing List wrote: > Hi guys, > > I cannot install spamassassin on FreeBSD. Does anyone experienced with this > before? Not here. > any advices will be appreciated. Any clues besides "it doesn't work"? >

Re: IP -> Responsible Person

2007-04-25 Thread Bob McClure Jr
hat into my "ew" tool, and if that works reliably enough, I'm going to build a more automated tool. In my best of all possible worlds, instead of throwing away obvious spam (scoring 10 or more), I'm going to identify the sending IP and auto-report the stuff. Cheers, -- Bob McCl

Re: IP -> Responsible Person

2007-04-25 Thread Bob McClure Jr
tate || $country) && print "Owner is in $state, $country\n"; %email && print "Email to ", join(", ", sort keys %email), "\n"; } else { warn "Could not run whois: $!\n";

Re: Spamd dieing for no apparent reason

2007-04-17 Thread Bob McClure Jr
rver sometimes when I got a SARE update and the restart of spamd didn't work right. Found I had to stop spamd, sleep for a few seconds, and then start it. If I did a plain restart, the start part didn't work because some of the children were still alive. There is doubtless a more elegan

Re: spam test

2007-04-09 Thread Bob McClure Jr
off-network locations being delivered to and > >>several users using these gateways as smarthost for their own MS > >>Exchange servers. Is it safe for me to use Botnet with my trusted > >>networks setup as described? > >Sure, your setup is much like mine and botnet r

Re: Change from "new mail mode" to "add to the existing header"

2007-04-03 Thread Bob McClure Jr
eed to do is put report_safe 0 in your local.cf (probably in /etc/mail/spamassassin or similar). Details are in "man Mail::SpamAssassin::Conf". > -- > View this message in context: > http://www.nabble.com/Change-from-%22new-mail-mode%22-to-%22add-to-the-existing-header%22-tf35153

Re: Sunday Morning Email Geek

2007-04-01 Thread Bob McClure Jr
text: > http://www.nabble.com/Sunday-Morning-Email-Geek-tf3500970.html#a9777388 > Sent from the SpamAssassin - Users mailing list archive at Nabble.com. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com Let us not become weary i

Re: sa-update too quiet

2007-03-29 Thread Bob McClure Jr
update on the command > line... Assuming you're calling sa-update from a cron job, why not just /path/to/sa-update && echo "There is a new SA update." It will come to you in the mail. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED]

Re: whitelist_from_rcvd

2007-03-21 Thread Bob McClure Jr
ly-To: [EMAIL PROTECTED] > Sensitivity: Normal > Importance: Normal > To: "Bruce Orand" <[EMAIL PROTECTED]> > Subject: Fw: breathtaking then selfish > From: "=?UTF-8?B?SmVyZW15IENoYXBtYW4=?=" <[EMAIL PROTECTED]> > Date: Wed, 21 Mar 2007 21:22:48 +0

SA 3.1.8 failing prefs_include.t

2007-03-19 Thread Bob McClure Jr
and there is nothing in the wiki about it. What have I missed? Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com The wicked man earns deceptive wages, but he who sows righteousness reaps a sure reward. Proverbs 11:18 (NIV)

Re: sendmail's vacation(1) & "Precedence: junk" headers

2007-03-12 Thread Bob McClure Jr
mAssassin has identified as > spam? Well, this list already has "Precedence: bulk" in the header. Isn't that sufficient? And thanks for being concerned about how vacation works. > Any advice will be appreciated, > Damon Cheers, -- Bob McClure, Jr. Bobcat

Re: [2] Auto-whitelist Errors & others.

2007-03-08 Thread Bob McClure Jr
t call spamd (via spamc) as root. > > > >> Here is the permissions for the folder: > >> drw-rw-rw-2 root nobody 4096 Mar 8 14:35 spamassassin/ > > > > That's definitely not going to work. 0777, not 0666 (directory, not a > > file).

Re: whitelist problem

2007-03-01 Thread Bob McClure Jr
e some > times it doesnt. > please suggest something. Provide an example header, scoring, and applicable whitelist entry? > Regards > .. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com Every house is built

Re: SA successfully installed, but it doesn't work. Can't locate Digest/SHA1.pm?

2007-02-25 Thread Bob McClure Jr
n update to support 3.0.0. > If the script in question is part of the SpamAssassin distribution, such as > 'spamassassin' or 'spamd', it's very likely that you're not running the 3.0.0 > version of that tool, and instead the older 2.x version is still i

Re: SA successfully installed, but it doesn't work. Can't locate Digest/SHA1.pm?

2007-02-25 Thread Bob McClure Jr
s is not in your @INC. But why is "_/usr/local/lib/perl5/site_perl/5.8.7/sun4-solaris_" in your @INC? What's up with that? Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com If you really keep the royal law found in Scripture, "Love your neighbor as yourself," you are doing right. James 2:8 (NIV)

Re: Medical tablets spams

2007-02-22 Thread Bob McClure Jr
BODY: Odd Letter Triples with DR 5.1 BAYES_99 BODY: Bayesian spam probability is 99 to 100% [score: 0.9998] 1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <http://www.spamcop

Re: SpamAssassin using spamc but not using rules correctly? Is my time being wasted changing local.cf etc?

2007-02-12 Thread Bob McClure Jr
ssage onto the customers mail server > > > > Appologies on the huge email, I wanted to give as much detail as I could > > > > Kind Regards, > > Philip Seccombe > > Turnstone Technologies NZ Limited > > > > Phone: +64 9 970 555

Re: sa-update gives error message Insecure dependency in open while running with -T switch

2007-02-08 Thread Bob McClure Jr
whatever else you want to do. > Kind Regards, > Philip Seccombe > Turnstone Technologies NZ Limited > > Phone: +64 9 970 5550 > Fax: +64 9 970 5559 > DDI: +64 9 970 5552 > Email: [EMAIL PROTECTED] > Web: www.turnstone.co.nz > > > -Original Message- &g

Re: sa-update gives error message Insecure dependency in open while running with -T switch

2007-02-08 Thread Bob McClure Jr
of the defaults, but I recommend you specify UNINST=1 for the install option, as suggested, and then select the CPAN server(s) you want. Then it will proceed with the install of IO::File. > Kind Regards, > Philip Seccombe > Turnstone Technologies NZ Limited > > Phone: +64 9 970 5550 &g

Re: sa-update gives error message Insecure dependency in open while running with -T switch

2007-02-08 Thread Bob McClure Jr
0. > > You can more than likely re-install File::IO which is part of the perl > base but seems to me to be borked. > > #perl -MCPAN -e 'install File::IO' > > Should work. from your directory is appears you're using perl 5.8.?? Do > a perl -v and if that insta

Re: Botnet FP

2007-02-01 Thread Bob McClure Jr
him a heads-up. Thanks. > Regards > /Jonas > -- > Jonas Eckerman, FSDB & Frukttr�det > http://whatever.frukt.org/ > http://www.fsdb.org/ > http://www.frukt.org/ Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com The mind of sinful man is death, but the mind controlled by the Spirit is life and peace. Romans 8:6 (NIV)

Botnet FP

2007-02-01 Thread Bob McClure
he user. What should I do in the long term? - Reduce the BOTNET score? - Add onceanddone.com to botnet_pass_domains? - Send a nastygram to [EMAIL PROTECTED] Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com The mind of sinfu

Re: sa-update correctly done?

2007-01-29 Thread Bob McClure Jr
s_spamassassin_org.cf > updates_spamassassin_org.pre > > Am I doing these correctly ? Please advise. Yes, that is correct. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com Let everything that has breath praise the LORD. Praise the LORD. Psalm 150:6 (NIV)

Re: bayes sql initialization

2007-01-25 Thread Bob McClure Jr
On Thu, Jan 25, 2007 at 05:20:27AM -0500, Tom Allison wrote: > Bob McClure Jr wrote: > >On Wed, Jan 24, 2007 at 09:01:58PM -0500, Tom Allison wrote: > >>Am I correct in understanding that I have to run sa-learn for every user > >>who is going to have a bayes token store

Re: bayes sql initialization

2007-01-24 Thread Bob McClure Jr
their Bayes with mis-marked ham and spam, or want to pre-load Bayes with some corpus. Standardize "shouldbeham" and "shouldbespam" boxes, and cron is your friend. I'd say "Bob's your uncle", but I'm not. :-) Cheers, -- Bob McClure, Jr.

Re: sa-update exclude some rulesets

2007-01-22 Thread Bob McClure Jr
f the > ruleset in question, but if the programme takes an option somehow, > that would be better. In your local.cf, put score 0 > thanks > > rolf. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com When the

Re: sa-stats.pl blows up on maillog covering turn of year

2007-01-04 Thread Bob McClure Jr
On Thu, Jan 04, 2007 at 07:09:54PM -0600, Chris wrote: > On Wednesday 03 January 2007 10:18 pm, Bob McClure Jr wrote: > > > I run sa-stats.pl written by Dallas: > > > > > > # file: sa-stats.pl > > > # date: 2005-07-27 > > > # version: 0.9 &

Re: sa-stats.pl blows up on maillog covering turn of year

2007-01-03 Thread Bob McClure Jr
On Wed, Jan 03, 2007 at 05:44:34PM -0600, Chris wrote: > On Tuesday 02 January 2007 3:54 pm, Bob McClure Jr wrote: > > sa-stats.pl as distributed with SA v3.1.7 blows out a ton of > > > > WARNING: ignoring future date in syslog line: Dec 31 20:26:56 bubba > > spamd[7149]

sa-stats.pl blows up on maillog covering turn of year

2007-01-02 Thread Bob McClure Jr
else experienced or fixed this? Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com Whatever you have learned or received or heard from me, or seen in me -- put it into practice. And the God of peace will be with you. Philippians 4:9 (NIV)

Re: How best to restart SpamAssassin with RDJ

2006-12-11 Thread Bob McClure Jr
er /etc/rc.d/init.d/spamassassin restart or /sbin/service spamassassin restart for SA_RESTART. They are functionally identical. > Thanks, > Geoff Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com "Where you go in

Re: Systemwide Procmail usage

2006-12-01 Thread Bob McClure Jr
On Fri, Dec 01, 2006 at 09:38:38AM -0700, [EMAIL PROTECTED] wrote: > > On Fri, December 1, 2006 8:06 am, Bob McClure Jr wrote: > > On Fri, Dec 01, 2006 at 05:56:06AM -0500, Will Nordmeyer wrote: > >> I know this isn't the procmail list, but had a quick question. > &

Re: Systemwide Procmail usage

2006-12-01 Thread Bob McClure Jr
27;s always, always, always in that format. FWIW, I use a different logic because I have many things I want to exclude from SA scanning, so before the call to spamc, I have recipes like: :0: * ^List-Id: /var/spool/mail/bob which diverts such mail directly to my mailbox without going through SA. Che

Re: Skip spamd for certain users

2006-11-23 Thread Bob McClure Jr
t; I think there are examples of this on the SA website, and the wiki. > > > -- > _ > John Andersen Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com "Where you go in the hereafter depends on what you were after here." - Thanks to Graffiti, 2 March 2004

Re: Sending Marked up mail to another address

2006-11-17 Thread Bob McClure Jr
ailex" and "man procmailrc". > # Work around procmail bug: any output on stderr will cause the "F" in > "From" > # to be dropped. This will re-add it. > :0 > * ^^rom[ ] > { > LOG="*** Dropped F off From_ header! Fixing up. " > &

Re: New Spam

2006-11-17 Thread Bob McClure Jr
of days ago) 40 or 50 spams per day I have to "moderate". So if I have to deal with it, the spammer pays with (I hope) a shutdown zombie. In case the spammer is reading this, it's hammered_dulcimers (at) lists.fmp.com. Cheers, -- Bob McClure, Jr. Bobcat Open Syste

Re: FW: Cron <[EMAIL PROTECTED]> /usr/local/etc/mail/spamassassin/update-rules.sh

2006-11-10 Thread Bob McClure Jr
t; US Mail: 430 Valona Loop, Round Rock, TX 78681-3893 Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com "Where you go in the hereafter depends on what you were after here." - Thanks to Graffiti, 2 March 2004

Re: How to detect this spam..

2006-10-18 Thread Bob McClure Jr
, too. Works fine. > So given that scenario, what do you perceive as the problem? > > -- > Jo Rhett > Senior Network Engineer > Network Consonance Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com &qu

Re: sa-learn in background

2006-10-11 Thread Bob McClure Jr
On Wed, Oct 11, 2006 at 02:00:42PM -0400, Theo Van Dinter wrote: > On Wed, Oct 11, 2006 at 12:23:28PM -0500, Bob McClure Jr wrote: > > it's over with, the script umounts the share and sometimes that > > reports > > > > umount: /var/spamtmp: device is busy >

Re: sa-learn in background

2006-10-11 Thread Bob McClure Jr
On Wed, Oct 11, 2006 at 01:05:36PM -0400, Bowie Bailey wrote: > Bob McClure wrote: > > My client built a script that runs sa-learn for each user's (about 15 > > of them) spam and ham boxes. > > That's easy enough. I do that here as well. > > > We're

sa-learn in background

2006-10-11 Thread Bob McClure
dn't think sa-learn does anything in the background. Am I not correct? The system is a RedHat ES4 box running postfix and spamd/spamc and procmail. Thanks for all your good work. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobc

Re: sa-learn: option to delete "learn-mails"

2006-10-09 Thread Bob McClure Jr
On Mon, Oct 09, 2006 at 02:38:41PM -0700, John D. Hardin wrote: > On Mon, 9 Oct 2006, Bob McClure Jr wrote: > > > Why not add "; > $myuser/spam_learn" > > "&& > $myuser/spam_learn" would be better. "&&" means "only ex

Re: sa-learn: option to delete "learn-mails"

2006-10-09 Thread Bob McClure Jr
o then end of the cronjob? That will leave the file intact with existing perms, but make it zero length. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com "Where you go in the hereafter depends on what you were after here." - Thanks to Graffiti, 2 March 2004

Re: local.cf

2006-10-09 Thread Bob McClure Jr
ence it in local.cf. All files in (presumably) /etc/mail/spamassassin/ with .cf extension will be read. Don't forget to restart spamd if you are using it. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com "Where you

Re: The grey hats are at it in force

2006-08-31 Thread Bob McClure Jr
masked avengers? ;-) > > -- > Gino Cerullo > > Pixel Point Studios > 21 Chesham Drive > Toronto, ON M3M 1W6 > > 416-247-7740 I have, from time to time, alerted a network admin of a phishing page on a machine on his network. He may well have handled it directly. I wo

Re: What is normal period for SA retraining ?

2006-06-15 Thread Bob McClure Jr
gt; use_bayes 1 > > > Jason Harris I've never had to. All my clients use per-user Bayes, and those that care feed sa-learn anything that's mis-categorized. I have a very low false rate. Currently using v3.1.1. Cheers, -- Bob McClure, Jr. Bobcat Open Syste

Re: Which Operating Systems Do You Use and Why?

2006-04-07 Thread Bob McClure Jr
, wait, that is a religion. :-) Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com The best things in life aren't things.

Re: Updated Pump and Dump rules. 2006-02-23

2006-02-24 Thread Bob McClure Jr
On Fri, Feb 24, 2006 at 12:25:02AM -0500, Gene Heskett wrote: > On Thursday 23 February 2006 23:20, Bob McClure Jr wrote: > >On Thu, Feb 23, 2006 at 10:59:02PM -0500, Gene Heskett wrote: > >> > >> A snippet or 3 from a 'crontab -l' as root: > >> [EMA

Re: Updated Pump and Dump rules. 2006-02-23

2006-02-23 Thread Bob McClure Jr
On Thu, Feb 23, 2006 at 10:59:02PM -0500, Gene Heskett wrote: > On Thursday 23 February 2006 22:45, Bob McClure Jr wrote: > >On Thu, Feb 23, 2006 at 10:36:19PM -0500, Gene Heskett wrote: > >> > >> > >> Also, where would it put it if it did dl a new version of

Re: Updated Pump and Dump rules. 2006-02-23

2006-02-23 Thread Bob McClure Jr
t 0 length so kmail is indeed picking up everything put > there. If RDJ is sending me email from its early morning run, its > getting lost someplace. > > Also, where would it put it if it did dl a new version of itself? Probably in /etc/mail/spamassassin/RulesDuJour/

Re: Updated Pump and Dump rules. 2006-02-18

2006-02-21 Thread Bob McClure Jr
POOF SARE_OEM \ > SARE_RANDOM SARE_SPECIFIC SARE_STOCKS" > > ...but when I run it I get this: > > No index found for ruleset named SARE_STOCKS. Check that this ruleset > is still valid. > > am I doing something wrong? You need a new rules_du_jour. SARE_S

Re: seeing a few new spams with low SA scoring

2005-12-06 Thread Bob McClure Jr
a virus, it goes straight to /dev/null. SA never sees it. > so SA does not trap it, should i be looking at a procmail rule to dump the > emails. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com Peace at any price is inflationary.

Re: RulesDuJour problem

2005-12-04 Thread Bob McClure Jr
> Cheers, Gene The spamd options are located in two places - in /etc/sysconfig/spamassassin and in the main script, /etc/rc.d/init.d/spamd (or whatever you called it). Long option names are preceded by two dashes. Somewhere you have -max-conn-per-child=50 where you should have --max-co

Re: Help with install and config

2005-10-19 Thread Bob McClure Jr
tips! > >>Liam > >> > >> > >> > Thanks all who replied. Karl P. helped me out with pointing out that > procmailrc needed to be in /etc/ and more importantly, because I'm not > finding this piece of info on the Web site anywhere, i

Re: Problem to start spamd as a user

2005-08-26 Thread Bob McClure Jr
On Fri, Aug 26, 2005 at 02:03:53PM -0400, Matt Kettler wrote: > At 09:58 AM 8/26/2005, Bob McClure Jr wrote: > >Umm, why do you want to do that? spamd is supposed to be started as > >root, after which it changes ID to a non-priveledged user, like > >nobody. > > Erm, b

[EMAIL PROTECTED]: Bruno Della Ducata is out of the office.]

2005-08-26 Thread Bob McClure Jr
Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on bobcat.bobcatos.com X-Spam-Level: X-Spam-Status: No, score=-0.9 required=5.0 tests=BAYES_40,INVALID_DATE, NO_REAL_NAME autolearn=no version=3.0.4 I will be out of the office until 05.09.2005. - End forwarded message ----- Cheers,

Re: Problem to start spamd as a user

2005-08-26 Thread Bob McClure Jr
ore set 0 chosen. > debug: Storable module v2.13 found > debug: Preloading modules with HOME=spamd-20968-init > fatal: Can't create spamd-20968-init: Permission denied at > /usr/sbin/spamd line 1871. > > > __ > > > can somebody help me??? Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com Peace at any price is inflationary.

Re: Error in starting spamd

2005-08-22 Thread Bob McClure Jr
Suresh > > Well, if you are running with initscripts support then you'd want to > go into /etc/rc.d/init.d/spamassassin and edit the file. Look for the > options line and remove the -a from it. > > {^_^} Check also /etc/sysconfig/spamassassin. Cheers, -

Re: Where should I adjust scoring

2005-08-15 Thread Bob McClure Jr
. SA won't read /home/spamfilter/.spamassassin/user_prefs unless it's processing email for "spamfilter", and it's being called from something like ~spamfilter/.procmailrc. > Thanks, > Craig Sloan Also, you should upgrade to v3.0.4. Versions 3.0.1-3 have a DOS vul

Re: spamd failded to start after upgrade to version 3.0.4

2005-08-09 Thread Bob McClure Jr
> fax: +61 2 9252 3799 > > email: [EMAIL PROTECTED] > > internet: www.acl.edu.au > > Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com God doesn't have (or need) a Plan B.

Re: Not delivering Spam with Procmail

2005-08-09 Thread Bob McClure Jr
ail/spam owns it and no one else can write to it. You may need to make it world-writable. You can review that stuff if you want to, but if I went for a month without finding anything salvageable, I'd change things to summarily punt anything that scores that high. I punt anything above 9.

Re: spamassassin restart

2005-08-06 Thread Bob McClure Jr
On Sat, Aug 06, 2005 at 04:24:55PM -0500, Chris wrote: > On Saturday 06 August 2005 10:13 am, Bob McClure Jr wrote: > > > > Shutting down spamd: [ OK ] > > > Starting spamd: Could not create INET socket on 127.0.0.1:783: Address > > > already in use (IO::Soc

Re: /etc/rc.d/init.d/spamassassin restart

2005-08-06 Thread Bob McClure Jr
kind of odd race condition that causes spamd not to restart properly. I would think it would be more effective to reduce the max number of connections per child, if you're trying to hold down memory consumption. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com God doesn't have (or need) a Plan B.

Re: Basic Questions

2005-07-28 Thread Bob McClure Jr
n will be read and used. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com God doesn't have (or need) a Plan B.

Re: RDJ from cron - is it safe?

2005-06-27 Thread Bob McClure Jr
o do a "reload" (SIGHUP) instead, and (so far) have no more problems with it Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com God doesn't have (or need) a Plan B.

Re: Exceptions to all_spam_to?

2005-06-16 Thread Bob McClure Jr
he .procmailrc of the users who should have it? That's what we do at our ISP with over 1000 email accounts. Some punt all spam. Some punt spam that scores 9 or more. Some just mark spam without punting any of it. Not hard to manage at all. Cheers, -- Bob McClure, Jr. Bobcat Op

Re: OT : How to 'nomail' this list

2005-06-13 Thread Bob McClure Jr
just > have to read the manual and press the right button. > > -- Homer Simpson > Homer Defined Homer didn't happen to mention where he found the manual (for women) did he? Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PR

Re: debug output to file?

2005-06-07 Thread Bob McClure Jr
a clue? TIA spamassassin -D -t < test2.txt > test2.out 2> dbug.out 2 is the file handle for stderr. > Mike Schrauder > Specialty Blades, Inc. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com God is more interested in our availability than our ability.

Re: (OT, slightly) dealing with AOL spam reports?

2005-05-18 Thread Bob McClure Jr
problem is that, for privacy reasons, AOL expunges the recipient's address, so we have no idea whom to unsubscribe. It's a stupid system. I heard of one list owner who solved his problem by unsubscribing all his AOL listers, I think, after posting or emailing them that all of them need to subscribe themselves. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com God is more interested in our availability than our ability.

Re: Spamassasin false positive review

2005-04-04 Thread Bob McClure Jr
creates a new email with description, score listing, and then attaches the original message. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com Everyone wants to harvest, but few want to plow.

Re: bogus-virus-warnings-cf

2005-04-02 Thread Bob McClure Jr
contact me (flames about my english and the useless of this > driver will be redirected to /dev/null, oh no, it's full...). > (Michael Beck, describing the PC-speaker sound device) > ~~~~~~~~ Cheers, -- Bob McClure, Jr.

Re: EFF Newsletter as SPAM

2005-04-01 Thread Bob McClure Jr
On Fri, Apr 01, 2005 at 07:56:32AM -0600, Chris wrote: > On Thursday 31 March 2005 11:55 pm, Bob McClure Jr wrote: > > > Here's the latest one to come in: > > > > > > X-Spam-Status: Yes, score=5.2 required=5.0 > > > tests=AWL,BAYES_50,PYZOR_CHECK, SAR

Re: EFF Newsletter as SPAM

2005-04-01 Thread Bob McClure Jr
btract 100 points from the total score. It appears that whatever you put in the whitelist_from is not matching what's in the From: line. Could you show your whitelist_from line and a sample header of the subject email? Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com Everyone wants to harvest, but few want to plow.

a more effective spam defense

2005-03-23 Thread Bob McClure Jr
secondary MXs. This morning, in the shower (where many great ideas are born), it occurred to me that if one combined the two concepts, i.e. implement greylisting on (only) the secondary MX server, one might get all the benefits with no downside. Have I missed something? Cheers, -- Bob McClure, Jr

Re: Scanning and deleting my probably-spam folder

2005-03-23 Thread Bob McClure Jr
d if it all is, just lean on the "d" key until it hits bottom, then hit "q" to quit. Then "touch" the file if it's important. I don't think it is, because it will be re-created. > Any ideas? Let me know if any of that's not clear. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com Worry is a waste of the imagination.

Re: Excessive DNS Requests

2005-03-22 Thread Bob McClure Jr
ou'll be able to turn your DNS-based blacklists back on, too. > > I can't give you specific instructions for FC1, but I know older versions of > RedHat had a package specifically for this, all preconfigured. I think it was pdnsd, but it appears not to be in the FC sets. Google for

Re: How do I whitelist this list?

2005-03-22 Thread Bob McClure Jr
all to spamc like this: :0: * ^List-Id: .*spamassassin /var/spool/mail/bob :0fw | spamc . . . That way none of this affects my bayes db. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com Worry is a waste of the imagination.

Re: make test on recent SuSE 9.0 fails

2005-02-19 Thread Bob McClure Jr
> > (no, spamd not running) > > Kai > > -- > Kai Schätzl, Berlin, Germany > Get your web at Conactive Internet Services: http://www.conactive.com > IE-Center: http://ie5.de & http://msie.winware.org Install the Storable module. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com The best home improvement manual is the Bible.

  1   2   >