Re: [guinevere-discuss] Lint errors in 3.4

I've see several people write this. Can someone point me to some debate I can review? It seems to me that if you set the autolearn threshold fairly high and keep any eye on your bayes scoring, it would be a good thing. Thanks, Clay >>> "Joe Zitnik" <[EMAIL PROTECTED]> 12/18/2007 6:07 AM >>>

Re: unsubscribed

Nigel, none taken on my part! It's all good. Clay >>> Nigel Frankcom <[EMAIL PROTECTED]> 10/17/07 9:53 PM >>> So, for any that took offence from my post, again, I apologise.

RE: unsubscribed

I would agree if using "unsubscribe" in the subject line to get removed from many mailing lists weren't so common... its almost the norm, or at least it was. I do agree that the SA group is always helpful when "how it works" questions are asked. Some have even called me long distance on their dim

RE: unsubscribed

Steve, I hope you didn't misunderstand me... I AGREE with you! Clay >>> "Steve Ingraham" <[EMAIL PROTECTED]> 10/16/2007 4:10 PM >>> > -----Original Message- > From: Clay Davis [mailto:[EMAIL PROTECTED] > Sent: Tuesday,

Re: unsubscribed

Bob, I agree and have for a long time. I am always a little taken aback when an "unsubscriber" get hammered with sarcasm on this list... Plus, I have always "assembled first and read the directions later"... especially on Christmas Eve, when the pressure is on! It's human nature... but, then, s

Re: would you trust these people :)

Hey, anyone willing to add another day to the year gets my vote! Clay >>> <[EMAIL PROTECTED]> 9/30/2007 12:45 PM >>> they did not even learn the calendar at school Wolfgang >From a stock spam: +++ 5-day price: ~$0.50 Check it at 31.09.2007

Hurting Bayes with "(spam)" in the subject line?

Am I hurting my Bayes db by training it with HAM that has the text "(spam)" in the subject line of the message? Thanks, Clay

Re: NS Lookup Failed Question

Well, I don't have an /etc/resolv.conf ! Clay >>> "Jari Fredriksson" <[EMAIL PROTECTED]> 8/16/2007 3:41 PM >>> > Should I be concerned with the following results from a > --lint? > > - > > debug: is Net::DNS::Resolver available? yes > debug: Net::DNS version: 0.48 > debug: trying (3) sourc

NS Lookup Failed Question

Should I be concerned with the following results from a --lint? - debug: is Net::DNS::Resolver available? yes debug: Net::DNS version: 0.48 debug: trying (3) sourceforge.net... debug: looking up NS for 'sourceforge.net' debug: NS lookup of sourceforge.net failed horribly => Perhaps your resol

Rule for PDF and eCard Spam Needed

Can someone recommend a SAR(E) to mitigate the influx of the PDF and eCard spams until I can learn the bayes? (haven't been tuned into the list for a while... sorry.) Thanks, Clay

RE: So much spam

Sujit, No Bayes? Your only harnessing half the power of SA. Clay >>> "Sujit Acharyya-Choudhury" <[EMAIL PROTECTED]> 5/24/2007 12:46 PM >>> Is it official now that 3.2 has come out that it would cut down on spam? I am still on 3.1.7 and noticed too much spam. Relying on all SARE rules plus Botn

Lint results question

Should I be concerned with the following as a result of "--lint -D"? config: SpamAssassin failed to parse line, skipping: check_mx_delay 5 warning: description for FS_START_DOYOU2 is over 50 chars Thanks, Clay

ALL_TRUSTED Overriding Bayes

Hi gang: I am getting a bunch of messages that are passing through my SA setup with the following scores: pts rule name description -- -- 0.0 SUBJ_FOR_ONLY Subject contains "For Only" -3.3 ALL_TRUST

Re: AWL Troubles

however if this is the case I would suspect that your bayes database most also be askew. Best Clay Davis wrote: I need a quickie on the AWL. It looks like some spam is getting assigned a negative score because of an AWL rule(?). The messages are text and not too spammy otherwise, but from a la

AWL Troubles

I need a quickie on the AWL. It looks like some spam is getting assigned a negative score because of an AWL rule(?). The messages are text and not too spammy otherwise, but from a layman's perspective, definitely not something that should be on a whitelist. I know how to remove from the white

RE: Which Rules? - Follow Up

Here is my rule set... any I should/shouldn't have with SA v3.0.1? 00_FVGT_File001.cf 10_misc.cf 20_anti_ratware.cf 20_body_tests.cf 20_compensate.cf 20_dnsbl_tests.cf 20_drugs.cf 20_fake_helo_tests.cf 20_head_tests.cf 20_html_tests.cf 20_meta_tests.cf 20_phrases.cf 20_porn.cf 20_ratware.cf 20_ur

RE: Which Rules?

your spam protection. The Antidrug rules have already been incorporated in to SA. >>> On 2/2/2007 at 8:44 AM, "Clay Davis" <[EMAIL PROTECTED]> wrote: Thanks, Bowie. I'll take you up on #3... nothing like starting a good fight. :-) Regards, Clay >>> O

Which Rule - Follow Up

At the moment, I am looking for a rule to score this type of spam. As I understand it... which is limited... the Bayes check has minimal success on this... true? Thanks, Clay Return-path: <[EMAIL PROTECTED]> Received: from fighter-df4a083.karneval.cz (ip-89-103-41-118.karneval.cz [89.103.41.118])

RE: Which Rules?

Thanks, Bowie. I'll take you up on #3... nothing like starting a good fight. :-) Regards, Clay >>> On 2/1/2007 at 5:09 PM, in message <[EMAIL PROTECTED]>, Bowie Bailey <[EMAIL PROTECTED]> wrote: Clay Davis wrote: > I am looking for some advise on which rules

Which Rules?

I am looking for some advise on which rules to apply: Where are the guidelines for (not) applying rules like antidrug.cf? I see the header stipulates that it is not intended for v3.0 and higher. If these stipulations exist, are they always found in the comments of each cf or can I find this inf

Re: [guinevere-discuss] GWAVA dropping Guinevere

Has anyone thrown this to the SA wolves... I mean group, to get their opnion? (get ready to duck!) Clay >>> On 1/25/2007 at 9:49 AM, in message <[EMAIL PROTECTED]>, "Joe Zitnik" <[EMAIL PROTECTED]> wrote: Well, I'm going to bite my tongue on this until I hear something else. Every time I've used

Re: Avoiding Bayes Poison

Thanks, Michel. How do you correct? Run it back through as ham? C >>> On 1/11/2007 at 10:32 AM, in message <[EMAIL PROTECTED]>, Michel R Vaillancourt <[EMAIL PROTECTED]> wrote: Clay Davis wrote: > Over the past several months I have been saving the spam that slip

RE: Avoiding Bayes Poison

nr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -Original Message- > From: Clay Davis [mailto:[EMAIL PROTECTED] > Sent: 11 January 2007 14:58 > To: users@spamassassin.apache.org > Subject: Avoiding Bayes Poison > > Over the past several months I h

Avoiding Bayes Poison

Over the past several months I have been saving the spam that slips through to my users accounts to train my bayes with. I notice that lately almost all of it has (what I am assuming to be) an attempt to poison my bayes (a bunch of valid words put together in a nonsensical paragraph) at the bottom

RE: CF files not formatted correctly; ASCII vs Binary?

the files, use Wordpad instead of Notepad. It handles either line end. SpamAssassin (actually perl) doesn't care in this instance. FTP'ing them in ASCII won't hurt anything, but why mess with it? You may want to look into SA-UPDATE anyhow. Much smoother auto-update. Dan -Or

RE: CF files not formatted correctly; ASCII vs Binary?

thanks, neal. crimson reads it just fine. clay >>> On 1/5/2007 at 2:52 PM, in message <[EMAIL PROTECTED]>, "Coffey, Neal" <[EMAIL PROTECTED]> wrote: Clay Davis wrote: > I am using wget to ftp download several of the SARE rules on a weekly > basis. When I l

CF files not formatted correctly; ASCII vs Binary?

Can someone give me an idea what is causing this and of its causing a problem with my SA config? I am using wget to ftp download several of the SARE rules on a weekly basis. When I look at the rule on the SARE site, its formatting looks normal (spaces, tabs, indents, etc.); however, after an ftp

Re: perfecting Bayes

"You can't always get what you want" - Rolling Stones :-) Clay >>> On 9/13/2006 at 12:08 PM, in message <[EMAIL PROTECTED]>, benthere-nine <[EMAIL PROTECTED]> wrote: "I can't complain but sometimes I still do." - Joe Walsh No one ever said the Bayes scan would be perfect, but that's what we w

Re: How do I assign a negative score to BAYES_00 ?

"negativesinceofhumor", sorry this was hilarious, but we're a bunch of geeks. Clay>>> On 7/31/2006 at 7:40 PM, in message <[EMAIL PROTECTED]>, negativescore <[EMAIL PROTECTED]> wrote: > > Hello all, > > How do I assign a negative score to BAYES_00?  I use cpanel online, and> when > I enter a nega

Is it a bad idea to "--clear" the Bayes database

Is it a bad idea to "--clear" the Bayes database and start over from scratch. I am not getting any false positives or having any other problems, but I almost never "--learn" the database and if I do I never learn any ham. I am getting ready to feed my bayes about 6000 of my most receint spam me

Re: Increase overall preformance

With the subject as it is; did anyone's filter kick this as spam? :-) Clay >>> "jdow" <[EMAIL PROTECTED]> 5/17/2006 12:11 am >>> From: "Benjamin Adams" <[EMAIL PROTECTED]> > In Four days, > Spamassasin marked 1477 messages and missed 755 that where spam. > > I have my Required set to 5 > > wha

Re: --Lint Warnings

No, but you should see some of the other crap we do! >>> Matt Kettler <[EMAIL PROTECTED]> 4/21/2006 1:07:28 pm >>> Is there any chance anyone did something foolish like copy 50_scores.cf to /etc/mail/spamassassin?

--Lint Warnings

When I --lint my rule set I get the warnings below; however, I do see a corresponding rule score in 50_scores.cf for each: warning: score set for non-existent rule DRUG_ED_ONLINE warning: score set for non-existent rule SUBJECT_DRUG_GAP_VIC warning: score set for non-existent rule SUBJECT_DRUG_GAP

Manual Scan Help Needed

Does anyone have a simple batch file that will run all the files in a directory through SA and output the results to a log file. I am trying to understand why some messages slip through SA by manually scanning them so I can see where my scoring is falling short or not scoring at all. Thanks, C

Re: SORBS unreasonable

Sorry, I don't agree. Nothing you listed is an "illegal" practice. Not agreeing with their practices and extortion are very different. (btw - I don't use them either.) C >>> On 2/28/2006 at 4:19:34 pm, in message <[EMAIL PROTECTED]>, mouss <[EMAIL PR

Re: SORBS unreasonable

Maybe #3, in a strictly dictionary since of the word, but I doubt it. Never #2; SORBS holds no "official" position or power. When you make an accusation of extortion, you better be using the "legal" definition. I'm no lawyer, but I am pretty sure the legal definition involves some force coupl

Re: SORBS unreasonable

I don't believe what SORBS is doing fits the legal definition of extortion... no matter how you spell it. :-) There is no threat of either violence or criminal wrong doing and SORBS is operating a legal service... Re, Clay >>> On 2/28/2006 at 1:12:14 pm, in message <[EMAIL PROTECTED]>, mouss <[

Re: Spamassassin Learn

Does anyone have any good techniques for capturing a sample of ham that can be used as the ham corpus. I'm in a corporate environment and am not keen on the idea of intercepting non-spam messages. I will if I have to, but was hoping someone had a better idea. Regards, Clay >>> On 2/7/2006 a

RE: Post your top 10 from sa-stats

How are you guys obtaining these stats? Thanks, Clay >>> On 1/31/2006 at 8:53:01 am, in message <[EMAIL PROTECTED]>, Bowie Bailey <[EMAIL PROTECTED]> wrote: > TOP SPAM RULES FIRED > RULE NAME COUNT %OFRULES %OFMAIL %OFSPAM %OFHAM > RAZOR2_CF_RANGE_51_100 38578

How to dump Bayes

How do I dump my Bayes db so I can see what the tokes are scored at? Thanks, Clay

RE: Spamassassin & Bayes

By learning HAM, am I increasing the probability of HAM tokens? >>> On 1/13/2006 at 1:17:27 pm, in message <[EMAIL PROTECTED]>, Bowie Bailey <[EMAIL PROTECTED]> wrote: > Clay Davis wrote: >> If I only ever sa-learn SPAM and never HAM, will the process >> e

RE: Spamassassin & Bayes

holy crap! I'll just take your word for it. :) >>> On 1/13/2006 at 12:56:36 pm, in message <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]> wrote: > Clay Davis wrote: >> If I only ever sa-learn SPAM and never HAM, will the process >> eventually assign all &qu

Re: Spamassassin & Bayes

If I only ever sa-learn SPAM and never HAM, will the process eventually assign all "tokens" a high probability? Likewise, if I have never sa-learn[ed] any HAM will the first message that is sa-learn[ed] as SPAM assign a 1.000 to all tokens processed? Thanks, Clay >>> On 1/13/2006 at 9:40:02 a

Re: SA or Commercial AntiSpam products

My ONLY gripe is the setup routine for SA. I don't know if the commercial products have the SA code embedded so that the setup is masked. But for less technical types (me), SA's setup is a bit complicated. Has anyone rolled the SA setup into something similar to Windows Installer? Thanks for th

Re: Which Entry Caused Rule AWL to Fire?

Matt Kettler <[EMAIL PROTECTED]> 12/14/2005 1:36:38 pm >>> Clay Davis wrote: > When rule "AWL" fires, how do I know which entry set it off? I would like to > consider removing this entry from my White-list, but don't know which one. The AWL doesn't fir

Which Entry Caused Rule AWL to Fire?

When rule "AWL" fires, how do I know which entry set it off? I would like to consider removing this entry from my White-list, but don't know which one. pts rule name description -- -- 4.5 BAYES_99

Re: Which Rule Set?

Kai, Thanks, you were right. Score set 3 later... Re, Clay >>> [EMAIL PROTECTED] 12/14/2005 9:31:19 am >>> Clay Davis wrote on Wed, 14 Dec 2005 08:46:46 -0500: > Does this mean that I am not running Bayes or Network tests? The spam > I am catching shows that the B

Which Rule Set?

When I lint my rules the output tells me that it chose rule set 0. c:\>spamassassin -D --lint debug: SpamAssassin version 3.0.2 debug: Score set 0 chosen. debug: running in taint mode? no . . . Does this mean that I am not running Bayes or Network tests? The spam I am catching shows that the Ba

Why 4 scores on a rule?

Can someone give a quick explanation for the reason for having 4 different scores on some of the SA rules and which column is used for what? Thanks, Clay

Re: Help with sa-learn needed

o run correctly. Re, Clay >>> Matt Kettler <[EMAIL PROTECTED]> 12/13/2005 11:44:19 am >>> Clay Davis wrote: > I need some help understanding why the sa-learn process does not seem to be > completing correctly for me. When I kick off the sa-learn process from the &g

Help with sa-learn needed

I need some help understanding why the sa-learn process does not seem to be completing correctly for me. When I kick off the sa-learn process from the "C:\temp>" prompt it seems to start correctly but it never returns to the prompt. I have to use cntl-c to break out. The first time through I

How to Pipe SA Output to a File?

Can anyone tell me how to pipe the output to a file when I run SpamAssassin?  I want to do something similar to:       SpamAssassin -D --lint > C:\saout.txt   But it doesn't seem to work that way.   Thanks, Clay

Are Duplicate Rules OK?

How does SpamAssassin handle rules that are duplicated in different .cf files?  Which takes precedence?   Thanks, Clay