Re: more efficent big scoring

2008-01-22 Thread George Georgalis
On Tue, Jan 22, 2008 at 05:24:00PM +, Justin Mason wrote: > >Jim Maul writes: >> Justin Mason wrote: >> > John D. Hardin writes: >> >> On Tue, 22 Jan 2008, George Georgalis wrote: >> >> >> >>> On Sun, Jan 20, 2008 at 09:41:58AM -0800

Re: more efficent big scoring

2008-01-22 Thread George Georgalis
ch can kill remaining tests and short circut. eg anytime in the hierachy the score is above what the negative test can fix, etc. Appreciate the discussion thus far, unfortunately discussion is all I'm able to contribute at this time. Thanks, // George -- George Georgalis, information system scientist <

more efficent big scoring

2008-01-18 Thread George Georgalis
n all tests) Another approach might be simpler to integrate than above, simply do all the negative score tests first and pull out if the score gets to spam level. // George -- George Georgalis, information system scientist <

Re: disable use of ~/.spamassassin

2007-08-03 Thread George Georgalis
On Mon, Jul 23, 2007 at 09:50:26PM -0400, Matt Kettler wrote: >George Georgalis wrote: >> On Mon, Jul 23, 2007 at 11:46:58AM -0400, George Georgalis wrote: >> >>> How can I disable the use of ~/.spamassassin altogether? >>> >> >> nevermind... &

Re: disable use of ~/.spamassassin

2007-07-23 Thread George Georgalis
On Mon, Jul 23, 2007 at 11:46:58AM -0400, George Georgalis wrote: >How can I disable the use of ~/.spamassassin altogether? nevermind... --siteconfigpath=$CONF // George -- George Georgalis, information system scientist <

disable use of ~/.spamassassin

2007-07-23 Thread George Georgalis
version 3.1.2 How can I disable the use of ~/.spamassassin altogether? // George -- George Georgalis, information system scientist <

Re: .spamassassin

2006-05-29 Thread George Georgalis
to_whitelist 0 disabling use_auto_whitelist is only required without --nouser-config thanks! // George -- George Georgalis, systems architect, administrator < http://galis.org/ cell:646-331-2027 mailto:[EMAIL PROTECTED]

Re: .spamassassin

2006-05-29 Thread George Georgalis
On Mon, May 29, 2006 at 07:20:31PM -0400, Daryl C. W. O'Shea wrote: >On 5/29/2006 5:20 PM, George Georgalis wrote: >>Looking at this block from above SpamAssassin.pm line 1469, >>it's not clear to me how to avoid the warning/errors listed below. >> >>note: I&#x

.spamassassin

2006-05-29 Thread George Georgalis
le or directory 2006-05-29_21:11:05.03684 [24350] warn: auto-whitelist: open of auto-whitelist file failed: locker: safe_lock: cannot create tmp lockfile /var/qmail/.spam assassin/auto-whitelist.lock.run.galis.org.24350 for /var/qmail/.spamassassin/auto-whitelist.lock: No such file or directory

Re: blocked from rulesemporium.com

2005-09-12 Thread George Georgalis
: rulesemporium.com 28800 A 216.218.134.27 answer: www.rulesemporium.com 28800 A 216.218.134.27 if it is coming offline, um, well the other NS servers don't know that. // George -- George Georgalis, systems architect, administrator < http://galis.org/ cell:646-331-2027 mailto:[EMAIL PROTECTED]

Re: blocked from rulesemporium.com

2005-09-12 Thread George Georgalis
134.27 rulesemporium.com = 38.99.66.94 The rules seem at rulesemporium.com, but my scripts use www.rulesemporium.com *sigh* // George -- George Georgalis, systems architect, administrator < http://galis.org/ cell:646-331-2027 mailto:[EMAIL PROTECTED]

blocked from rulesemporium.com

2005-09-11 Thread George Georgalis
ew days since I tried to connect, but I've not been able to connect at all from 66.250.170.210. How can I go about finding why I was blacklisted? It would be nice to get an email to [EMAIL PROTECTED] on the occasion of being blacklisted from this service. // George -- George Georgali

Re: not using rbls?

2005-09-07 Thread George Georgalis
On Wed, Sep 07, 2005 at 03:47:24PM -0400, George Georgalis wrote: >On Wed, Sep 07, 2005 at 03:24:50PM -0400, Matt Kettler wrote: >>George Georgalis wrote: >> >>> grep -r REPORT /etc/spamassassin/ /usr/share/spamassassin/ >>> returned nothing that wasn't

Re: not using rbls?

2005-09-07 Thread George Georgalis
On Wed, Sep 07, 2005 at 05:31:13PM -0400, Matt Kettler wrote: >George Georgalis wrote: > >> >> Well since my MTA doesn't have an IP put in the header (it gets >> mail from stdin -- and SA runs from stdin forwarding the exit code >> to the MTA which then accept

Re: not using rbls?

2005-09-07 Thread George Georgalis
On Wed, Sep 07, 2005 at 03:45:56PM -0400, Matt Kettler wrote: >George Georgalis wrote: >> In my setup, trusted relays arn't tested with SA, they go straight >> to the queue. Untrusted networks must negociate SA in SMTP. I've >> visited this configuration issue

Re: not using rbls?

2005-09-07 Thread George Georgalis
On Wed, Sep 07, 2005 at 03:24:50PM -0400, Matt Kettler wrote: >George Georgalis wrote: > >> grep -r REPORT /etc/spamassassin/ /usr/share/spamassassin/ >> returned nothing that wasn't attached to other characters. > >Hmm.. what about greping /etc/resolv.conf? nothing

Re: not using rbls?

2005-09-07 Thread George Georgalis
On Wed, Sep 07, 2005 at 02:49:50PM -0400, Matt Kettler wrote: >George Georgalis wrote: >> 2005-09-07 13:49:10.975816500 logmsg: checking message <[EMAIL PROTECTED]> >> for geo:1002. >> 2005-09-07 13:49:10.986551500 debug: received-header: parsed as [ &g

Re: not using rbls?

2005-09-07 Thread George Georgalis
On Wed, Sep 07, 2005 at 02:47:04PM -0400, Matt Kettler wrote: >Fred wrote: >> George Georgalis wrote: >> >>>Argument "REPORT" isn't numeric in >>>subroutine entry at /usr/share/perl/5.6.1/IO/Socket/INET.pm line 223, >>> line 58. 2005-09-07

Re: not using rbls?

2005-09-07 Thread George Georgalis
On Wed, Sep 07, 2005 at 02:15:09PM -0400, Fred wrote: >George Georgalis wrote: >> Argument "REPORT" isn't numeric in >> subroutine entry at /usr/share/perl/5.6.1/IO/Socket/INET.pm line 223, >> line 58. 2005-09-07 13:49:11.026387500 Argument "REPORT" i

Re: not using rbls?

2005-09-07 Thread George Georgalis
On Wed, Sep 07, 2005 at 11:35:53AM -0400, Matt Kettler wrote: >George Georgalis wrote: >> it would seem the following rule is not being used... >> >> header __RCVD_IN_SBL_XBLeval:check_rbl('sblxbl', >> 'sbl-xbl.spamhaus.org.') >> de

not using rbls?

2005-09-07 Thread George Georgalis
Plugin::URIDNSBL but maybe I need another plugin? What's missing? // George -- George Georgalis, systems architect, administrator < http://galis.org/ cell:646-331-2027 mailto:[EMAIL PROTECTED]

Re: How to use Multilog ?

2005-08-15 Thread George Georgalis
stderr 2>&1 ==> /service/spamd/log/run <== #!/bin/sh exec setuidgid log multilog t /var/log/spamd -- George Georgalis, systems architect, administrator < http://galis.org/ cell:646-331-2027 mailto:[EMAIL PROTECTED]

Re: a problem with linux 2.6.11 and sa

2005-03-09 Thread George Georgalis
On Wed, Mar 09, 2005 at 01:06:11PM +, Nix wrote: >> An interesting technique that allows a program (such as a log writer) >> to run as an unprivileged user, while receiving privileged data. (taken >> almost verbatim from Gerrit Pape's socklog) >> >> #!/bin/sh >> exec > exec 2>&1 >> exec softl

Re: a problem with linux 2.6.11 and sa

2005-03-08 Thread George Georgalis
On Tue, 8 Mar 2005 12:19:53 -0500, George Georgalis <[EMAIL PROTECTED]> wrote: > On Tue, Mar 08, 2005 at 11:58:14AM -0500, George Georgalis wrote: > >On Tue, Mar 08, 2005 at 01:37:03PM +, Nix wrote: > >>On Thu, 3 Mar 2005, George Georgalis uttered the following: &g

Re: a problem with linux 2.6.11 and sa

2005-03-08 Thread George Georgalis
On Tue, Mar 08, 2005 at 11:58:14AM -0500, George Georgalis wrote: >On Tue, Mar 08, 2005 at 01:37:03PM +, Nix wrote: >>On Thu, 3 Mar 2005, George Georgalis uttered the following: >>> I recall a problem a while back with a pipe from >>> /proc/kmsg that was sent

Re: a problem with linux 2.6.11 and sa

2005-03-08 Thread George Georgalis
On Tue, Mar 08, 2005 at 01:37:03PM +, Nix wrote: >On Thu, 3 Mar 2005, George Georgalis uttered the following: >> I recall a problem a while back with a pipe from >> /proc/kmsg that was sent by root to a program with a >> user uid. The fix was to run the logging program

Re: a problem with linux 2.6.11 and sa

2005-03-03 Thread George Georgalis
On Thu, Mar 03, 2005 at 04:53:58PM -0500, Matt Kettler wrote: >At 04:40 PM 3/3/2005, George Georgalis wrote: >>This log entry indicates when I booted into 2.6.11: >>2005-03-02 12:05:47.018334500 2005-03-02 17:05:47 [781] i: server killed >>by SIGTERM, shutting down > >

a problem with linux 2.6.11 and sa

2005-03-03 Thread George Georgalis
Is anyone successfully runing SA on a 2.6.11 linux kernel? >On Thu, 3 Mar 2005 02:16:03 -0500, George Georgalis <[EMAIL PROTECTED]> wrote: >> I'm very defiantly seeing a problem with the 2.6.11 >> kernel and my spamassassin setup. However, it's not >> clea

Re: problem with linux 2.6.11 and sa

2005-03-03 Thread George Georgalis
>On Thu, 3 Mar 2005 02:16:03 -0500, George Georgalis <[EMAIL PROTECTED]> wrote: >> I'm very defiantly seeing a problem with the 2.6.11 >> kernel and my spamassassin setup. However, it's not >> clear exactly where the problem is, seems like sa >> but

problem with linux 2.6.11 and sa

2005-03-03 Thread George Georgalis
m fairly certain. If anyone is experiencing the problem please contact me on or off the list. A sure sign of it is no logs (with debug) for remote sa connections which score "0/0" and correct operation with "cat spam.txt | spamc -R"; fix is to use the older kernel. // George

Re: [SARE] Rules updates: URI

2005-02-21 Thread George Georgalis
>>-Original Message- >>From: George Georgalis >>Sent: Monday, February 21, 2005 10:15 AM >>To: users@spamassassin.apache.org >>Subject: Re: [SARE] Rules updates: URI > >Regarding the comment on too much disclosure in the logs, there is >nothing keep

Re: [SARE] Rules updates: URI

2005-02-21 Thread George Georgalis
I can't >be sure. I'm overloaded and haven't had the chance to try... >George Georgalis (and others): I've made a first pass at incorporating >your suggestions for a change log into these files. There's a new >file, http://www.rulesemporium.com/rules/70_sa

Re: [SARE] header rules updated

2005-02-18 Thread George Georgalis
E1 RULE2 RULE3 RULE4 RULE5 RULE6 #@@# removed OLDRULEa OLDRULEb OLDRULEc OLDRULEd OLDRULEe #@@# changed FAVORITEa FAVORITEb FAVORITEc FAVORITEd FAVORITEe // George -- George Georgalis, systems architect, administrator Linux BSD IXOYE http://galis.org/george/ cell:646-331-2027 mailto:[EMAIL PROTECTED]

Re: [SARE] header rules updated

2005-02-18 Thread George Georgalis
;> >I don't understand... I assume you would prefer the notification to not >knowing it was updated at all...? The behavior is fine, just add the output of "grep '#@@#' newfile.cf" to the ${MESSAGES} whether lint failed or not. (Once changes get that tag.) I can send

Re: [SARE] header rules updated

2005-02-18 Thread George Georgalis
nough. btw - I don't feel good about askin. I appreciate the rules being made available in the first place. And would be happy to send a case of real beer to a deserving fridge, in any event. Feel free to send address offlist. // George -- George Georgalis, systems architect, administrator Linux BSD IXOYE http://galis.org/george/ cell:646-331-2027 mailto:[EMAIL PROTECTED]

Re: [SARE] header rules updated

2005-02-17 Thread George Georgalis
ribute files, it is widely used to distribute incremental changes to OS source in the BSD world, and allows easy checkout of particular revisions or revision sets. That should be straight forward with a cvs ruleset repository in place. I'm not sure if SVN has a cvsup equivalent.) -- George Georgalis, systems architect, administrator Linux BSD IXOYE http://galis.org/george/ cell:646-331-2027 mailto:[EMAIL PROTECTED]

Re: [SARE] header rules updated

2005-02-17 Thread George Georgalis
mment designed #@@# for grep-ing would be useful for the casual RDJ user to monitor #@@# what automatic updates are doing, as well as function to notify the #@@# enterprise admin of the changes he needs to validate, and integrate #@@# with his private rules. If you are going through the trouble of publishing your rulesets for the ease of others to use, I don't see the point of forcing them to submit trust or manually discover changes when you publish them. Regards, // George -- George Georgalis, systems architect, administrator Linux BSD IXOYE http://galis.org/george/ cell:646-331-2027 mailto:[EMAIL PROTECTED]

Re: [SARE] header rules updated

2005-02-17 Thread George Georgalis
is really okay. I'd just assume see a change log as part of the notification that new rules have been loaded (or that lint prevented those changes from happening). // George -- George Georgalis, systems architect, administrator Linux BSD IXOYE http://galis.org/george/ cell:646-331-2027 mailto:[EMAIL PROTECTED]

Re: [SARE] header rules updated

2005-02-16 Thread George Georgalis
Rather than squelching custom site rules, I think it more appropriate to verbosely report why rules become obsoleted (not necessarily in the new ruleset). Maybe a changes file for each cf file is appropriate? You cannot guarantee what or how anything is done in a local config, let the admin who cre

Re: [SARE] header rules updated

2005-02-16 Thread George Georgalis
es for them but they seem gone now... // George -- George Georgalis, systems architect, administrator Linux BSD IXOYE http://galis.org/george/ cell:646-331-2027 mailto:[EMAIL PROTECTED]

diff for rules_du_jour

2004-12-23 Thread George Georgalis
s published and RDJ is further modified to update, and use that file (if undefined in config). The upgrade should be seamless for everyone. I'm happy to add that code to my patch if the author(s) wouldn't prefer doing themself. Thanks!

Re: AWL and ABL Re: trusted_networks and ALL_TRUSTED

2004-11-02 Thread George Georgalis
On Tue, Nov 02, 2004 at 09:46:55AM -0800, Justin Mason wrote: >George Georgalis writes: >> On Tue, Nov 02, 2004 at 01:03:02PM +, Sean Doherty wrote: >> >On Tue, 2004-11-02 at 12:50, George Georgalis wrote: >> >> >Do you mean -0.001? Why would you want to p

Re: AWL and ABL Re: trusted_networks and ALL_TRUSTED

2004-11-02 Thread George Georgalis
On Tue, Nov 02, 2004 at 03:40:02PM +, Sean Doherty wrote: >On Tue, 2004-11-02 at 15:16, George Georgalis wrote: > >> >> The setup I use routes mail at the tcp level, it's basically impossible >> >> for a message to reach spam assassin if it's from

Re: AWL and ABL Re: trusted_networks and ALL_TRUSTED

2004-11-02 Thread George Georgalis
On Tue, Nov 02, 2004 at 01:03:02PM +, Sean Doherty wrote: >On Tue, 2004-11-02 at 12:50, George Georgalis wrote: >> >Do you mean -0.001? Why would you want to penalise mail >> >coming thru a trusted path? >> >> It really doesn't matter to me what the s

Re: AWL and ABL Re: trusted_networks and ALL_TRUSTED

2004-11-02 Thread George Georgalis
On Tue, Nov 02, 2004 at 10:24:57AM +, Sean Doherty wrote: >On Mon, 2004-11-01 at 20:37, George Georgalis wrote: > >> skip_rbl_checks 1 >> use_bayes 0 >> >> noautolearn 1 >> use_auto_whitelist 0 >> score AWL 0.001 >> >> trusted_netwo

Re: AWL and ABL Re: trusted_networks and ALL_TRUSTED

2004-11-01 Thread George Georgalis
On Mon, Nov 01, 2004 at 03:13:50PM -0500, Matt Kettler wrote: >At 02:11 PM 11/1/2004, George Georgalis wrote: >>those false negatives are also growing an AWL, which I also don't want. >> >>-1.4 AWLAWL: From: address is in the auto white-list >>

AWL and ABL Re: trusted_networks and ALL_TRUSTED

2004-11-01 Thread George Georgalis
On Mon, Nov 01, 2004 at 02:03:36PM -0500, George Georgalis wrote: >In any event, how is it disabled? I'm getting false negatives... > >-2.8 ALL_TRUSTEDDid not pass through any untrusted hosts > >In my setup SA doesn't get _any_ trusted network connection

Re: trusted_networks and ALL_TRUSTED

2004-11-01 Thread George Georgalis
I don't want SA even checking the network. how do I disable it completely? // George -- George Georgalis, systems architect, administrator Linux BSD IXOYE http://galis.org/george/ cell:646-331-2027 mailto:[EMAIL PROTECTED]