RE: my email box is getting bombarded with spam

2006-07-04 Thread Greg Allen
> -Original Message- > From: tomliuwhite [mailto:[EMAIL PROTECTED] > Sent: Tuesday, July 04, 2006 10:47 PM > To: users@spamassassin.apache.org > Subject: my email box is getting bombarded with spam > > > > I have SpamAssassin in my cpanel. I can edit it by > cpanel->mail->SpamAssassin. Rece

RE: Postfix content filter/milter

2006-06-26 Thread Greg Allen
-Original Message- From: Justin Cook [mailto:[EMAIL PROTECTED] Sent: Monday, June 26, 2006 9:07 PM To: Greg Allen Cc: users@spamassassin.apache.org Subject: Re: Postfix content filter/milter Thanks Greg! That was by far the easiest solution, although I'm looking into clam-av and am

RE: Postfix content filter/milter

2006-06-26 Thread Greg Allen
-Original Message- From: Justin Cook [mailto:[EMAIL PROTECTED] Sent: Monday, June 26, 2006 10:02 AM To: users@spamassassin.apache.org Subject: Postfix content filter/milter Are there any postfix users out there who can recommend a way to delete mail based on spamassassin results? Specifi

RE: detect active config, now: Start it Up

2006-06-25 Thread Greg Allen
> -Original Message- > From: Brian Hamlin [mailto:[EMAIL PROTECTED] > Sent: Sunday, June 25, 2006 11:24 PM > To: users@spamassassin.apache.org > Subject: was: detect active config, now: Start it Up > > > all- i read the theory of operation on the wiki for > spamd. Still wondering... > >

RE: SpammAssassin on WHM/Cpanel

2006-06-25 Thread Greg Allen
> -Original Message- > From: Ken Dawber [mailto:[EMAIL PROTECTED] > Sent: Sunday, June 25, 2006 10:12 AM > To: users@spamassassin.apache.org > Subject: SpammAssassin on WHM/Cpanel > > > I have a reseller shared hosting account under WHM/Cpanel software. (In > other words I’m not a systems

RE: For those who are considering a Barracuda Network Device server

2006-06-12 Thread Greg Allen
> > I hope this helps somebody else from making the same mistake. > > Brian > I looked all over the Internet about 5 years ago for the best anti-spam software. I wanted it to be Windows-based easy to use, etc. Well, I found the best anti-spam software and it turned out to be SpamAssassin. It wa

RE: The Future of Email is SQL

2006-06-09 Thread Greg Allen
> -Original Message- > From: Rob McEwen [mailto:[EMAIL PROTECTED] > Sent: Friday, June 09, 2006 6:16 PM > To: users@spamassassin.apache.org > Subject: RE: The Future of Email is SQL > > > > >>MS Exchange... one big Database > > Exactly... > > And that is one reason why I wouldn't touch th

RE: The Future of Email is SQL

2006-06-09 Thread Greg Allen
-Original Message- From: Marc Perkel [mailto:[EMAIL PROTECTED] Sent: Friday, June 09, 2006 4:19 PM To: users@spamassassin.apache.org Subject: The Future of Email is SQL Thoughts . ? - MS Exchange... one big Database You can use Exmerge to do

RE: is there a way to block email coming from

2006-06-08 Thread Greg Allen
> -Original Message- > From: John D. Hardin [mailto:[EMAIL PROTECTED] > Sent: Thursday, June 08, 2006 12:33 PM > To: Greg Allen > Cc: [EMAIL PROTECTED] Apache. Org > Subject: RE: is there a way to block email coming from > > > On Thu, 8 Jun 2006, Greg Allen wr

RE: is there a way to block email coming from

2006-06-07 Thread Greg Allen
> > However, the ISP dynamic address tests *do* belong in the MTA RBL > checks. The fraction of legitimate emails received from dynamic-IP > hosts is vanishingly small compared to the tens or hundreds of > thousands of compromised Windows boxen spewing spam and viruses... > Sorry to poke in on th

RE: Hiring for Spam Assassin Troubleshooting

2006-06-02 Thread Greg Allen
You say the problem is 30 min to 2 hours. But you have been working on it for how long and not fixed it? You are probably over-simplifying the issue (maybe, maybe not). When you quote a job you have to plan for worse case. Dealing with vendors, dns issues, propagation issues, looking at the entire

RE: Hiring for Spam Assassin Troubleshooting

2006-06-02 Thread Greg Allen
Well, we already know you don't consider $1,000 for onsite service and a money back guarantee reasonable. ;-) > I would much rather fine someone to hire at a reasonable cost to > come in and > fix the errors that are making SA detect our own emails as SPAM. > > Wayne > -- > View this message in

RE: Postfix problem I am hoping you can help with

2006-05-30 Thread Greg Allen
The format is correct, although I use IP address myself. So, I would do like this. aol.com smtp:192.168.5.3 You must also specify AOL as a domain you accept in the 'relay_domains' (main.cf file) You must also add the following line (or similar) to main.cf transport_maps =

RE: Redirect all spam to a specific email

2006-05-21 Thread Greg Allen
If you are running postfix at the server, you can use HEADER_CHECKS HEADER_CHECKS runs *after* Spamassassin, so it can detect spam points added by SA in the header. So, lets say you wanted to redirect anything with 15 points or more to a certain email address... you could do it with HEADER_CHECKS

RE: Bayes not working

2006-05-10 Thread Greg Allen
You will probably get more ideas from posters, but here is my thought. Are you running spamassassin -D --lint as the user that SA runs under when it is running live? For instance, I call SA with the user "filter", not the user "root". So, to properly test SA I have to first type: su filter This

RE: Silly Question

2006-05-03 Thread Greg Allen
I know some people use the public folder drag-drop for learning spam, but I personally don't like the whole idea. And I did consider it. I would rather work smarter on the server end to kill or mark the spam before it gets to the user. I don't think users should have to worry about all the techni

RE: ANNOUNCE: Apache SpamAssassin 3.1.1 available!

2006-03-11 Thread Greg Allen
Try to keep refreshing the download page to get a different download mirror site. You will eventually find one that has it. > Mmh, not available: The requested URL > /spamassassin/source/Mail-SpamAssassin-3.1.1.tar.gz was not found > on this server. > > What`s wrong? >

RE: ANNOUNCE: Apache SpamAssassin 3.1.1 available!

2006-03-11 Thread Greg Allen
I installed the new 3.1.1 release from 3.0.4 this evening. No unusual problems noticed, it appears to be running fine. I had to install a few new modules from CPAN but 'perl Makefile.PL' told me which ones, so no problem there. I also had to comment out a few rules I had created. 3.1.1 did not l

RE: Rejecting emails in procmailrc?

2006-02-27 Thread Greg Allen
Title: Rejecting emails in procmailrc? If you are using Postfix you can do something like this in header_checks :   /^X-Spam-Level: \*{20}.*/  REJECT  Spam content rejected.      (Test the syntax, but I think the above is correct or very very close.)   header_checks is run as a Postfi

RE: SORBS unreasonable

2006-02-27 Thread Greg Allen
I noticed you did not say your mailing list was a confirmed opt-in. If it does not do a confirmed opt-in, you should fix that. Otherwise you will not stay delisted long. Could get expensive too at $50 a pop. > On enquiry on why we were blacklisted, it came to light that it was > blacklisted on

RE: (OT, but relevant) Playing with AOL?

2006-02-23 Thread Greg Allen
You don't. Only idiots use AOL. AOL management are idiots, so it is a good match. One of those idiot users will push the AOL spam button on forwarded spam, that marks your server as a spam source to AOL admins. Nothing you can do about that. Once that happens a few times you're done. Better to

RE: Stock image woes

2006-02-15 Thread Greg Allen
You are already sitting at 4 points here. Why don't you just up the SA score of either or both of these RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL Problem solved. > -Original Message- > From: Craig Baird [mailto:[EMAIL PROTECTED] > Sent: Wednesday, February 15, 2006 11:52 AM > To: Chris Sante

RE: User getting spammed to death

2006-02-13 Thread Greg Allen
Using some good RBLs at your MTA should help, also make sure you are running current version of SA with everything enabled (bayes, urbl, etc) > -Original Message- > From: Peter Marshall [mailto:[EMAIL PROTECTED] > Sent: Monday, February 13, 2006 1:16 PM > To: SpamAssassin list > Subject

RE: User getting spammed to death

2006-02-13 Thread Greg Allen
Using some good RBLs at your MTA should help, also make sure you are running current version of SA with everything enabled (bayes, urbl, etc) > -Original Message- > From: Peter Marshall [mailto:[EMAIL PROTECTED] > Sent: Monday, February 13, 2006 1:16 PM > To: SpamAssassin list > Subject:

RE: phishing stuf isn't being caught

2005-12-08 Thread Greg Allen
SA has a great plugin that will catch most of these, plus viruses. You would need to install Clamav and this plugin. http://wiki.apache.org/spamassassin/ClamAVPlugin > -Original Message- > From: Gene Heskett [mailto:[EMAIL PROTECTED] > Sent: Thursday, December 08, 2005 7:13 PM > To:

RE: Temp RBL /invalid recipient

2005-11-10 Thread Greg Allen
Your subject should not be temp RBL, you started talking about temp RBL then changed subjects to your real subject. Regardless. You need to configure an invalid recipient filter. Different email servers have different ways of doing this. Postfix has a rule too for invalid recipients. Here is a

RE: [EMAIL PROTECTED]: Mail delivery failed: returning message to sender]

2005-10-30 Thread Greg Allen
> > Somethings odd here. The above message, when it arrived here from the > list, did have a real name ([EMAIL PROTECTED]) in the headers, all > lines of it except those that refered to [EMAIL PROTECTED] or to the > intermediate handlers of the message. So it looks to me as if he is > doing it r

RE: Joe-jobbed...What are my options?

2005-09-24 Thread Greg Allen
If I understand your question correctly, the industry seems to be going this way... Postfix has this beautiful rule. -- reject_unverified_recipient Reject the request when mail to the RCPT TO address is known to bounce, or when the recipient address destination is not reachable.

Postfix/SA/Exchange 2000 'NDR attack' exploit spam and other bad things

2005-09-19 Thread Greg Allen
I have recently been working on the Exchange 2000 NDR attack issue. For those who are not aware of this issue, I will explain. It seems there is a certain group of desperate idiot spammers that believe that bouncing off good Exchange 2000 servers with non-delivery reports is a good way to deliver

RE: why does this mail get 0 hits?

2005-09-18 Thread Greg Allen
I might be getting old, but I don't see any SpamAssassin in the headers of that message. Only this line... X-GMX-Antispam: 0 (Mail was not recognized as spam) Do you have email coming in from different servers, maybe not hitting SA? > -Original Message- > From: Andreas Kotowicz [ma

RE: bellsouth & hotmail servers

2005-09-12 Thread Greg Allen
> > But I'm simply finding that some bellsouth and hotmail SMTP IP > addresses are > so "dirty" that they stand out separate from regular non-spammy IPs to the Hotmail is one of the three largest email providers in the United States, if not the world. That being Hotmail, Yahoo, AOL. Now, there ha

RE: bellsouth & hotmail servers

2005-09-12 Thread Greg Allen
You will find that not all RBLS are built the same. Most are owned by individuals who create the RBL to suit their own needs. Those needs may not be the same as your needs. If you want to be safe with rejections on your front end before it hits SpamAssassin (Postfix front end, etc.), stick with RB

RE: SpamCop listing internal hotmail servers?

2005-09-09 Thread Greg Allen
; From: Dan Hollis [mailto:[EMAIL PROTECTED] > Sent: Friday, September 09, 2005 7:40 PM > To: Greg Allen > Cc: users@spamassassin.apache.org > Subject: RE: SpamCop listing internal hotmail servers? > > > please take this penis waving offlist. this is spamassassin, not > my-dick-is-bigger-than-your-dick. > >

RE: SpamCop listing internal hotmail servers?

2005-09-09 Thread Greg Allen
> > > > From where I stand, he's right on the mark. Spamcop is run by morons, > > To insult other system administrators will not help to build a better > society. I only insulted Spamcop admins because they are idiots. Actually, I don't even really consider it an insult. I consider an insult an u

RE: SpamCop listing internal hotmail servers?

2005-09-07 Thread Greg Allen
Spamcop admins are idiots. They have always had issues with allowing major ISPs such as Hotmail to be listed. Spamcop users are idiots too. When you have end users pushing the 'this is spam' button when they get an email that they don't like from their own friends or family, well... you get Spamco

RE: How to discard spam (a return)

2005-09-01 Thread Greg Allen
Sounds like something I just ran into. Procmail only works if an actual mailbox lives on the server from what I can tell. So, one of the SA list users recommended I try header_checks in Postfix. That worked for me. You need to have a newer version of Postfix that supports header_checks then do so

RE: phish/bayes

2005-08-28 Thread Greg Allen
I wouldn't worry about it. You can whitelist the real ebay servers with SA.   Also, if you want to catch more of the phish messages you can install the Clamav plugin for SA, it does very good at finding phishies. You have to also install Clamav, but it is a fairly simple thing to install.

RE: How to discard spam mails

2005-08-24 Thread Greg Allen
From: Clay Irving [mailto:[EMAIL PROTECTED] > Sent: Wednesday, August 24, 2005 11:48 AM > To: Greg Allen > Cc: jdow; users@spamassassin.apache.org > Subject: Re: How to discard spam mails > > > On Wed, Aug 24, 2005 at 07:10:37AM -0400, Greg Allen wrote: > > > I tried Proc

RE: How to discard spam mails

2005-08-24 Thread Greg Allen
han procmail's. > {^_^} > - Original Message - > From: "Greg Allen" <[EMAIL PROTECTED]> > > > Mailscanner and Amavis-new have way too much overhead IMO. For > production, > > I already have to maintain latest SA releases and Postfix >

RE: How to discard spam mails

2005-08-23 Thread Greg Allen
[EMAIL PROTECTED] > Sent: Tuesday, August 23, 2005 5:34 PM > To: [EMAIL PROTECTED] > Cc: users@spamassassin.apache.org > Subject: Re: How to discard spam mails > > > Greg Allen wrote: > > I have a motive for my madness. I installed the Clamav plugin > for postfix >

RE: How to discard spam mails

2005-08-23 Thread Greg Allen
> What version of Postfix are you using? I am using the latest version 2.2 of Postfix > What method of integration are > you using for SA and Clamav? SA is called similar to this. http://wiki.apache.org/spamassassin/IntegratedSpamdInPostfix Clamav is called like this. http://wiki.apache.org/sp

Re: How to discard spam mails

2005-08-23 Thread Greg Allen
I have a motive for my madness. I installed the Clamav plugin for postfix and it works great. Only problem with it is that it can not dump viruses, it only tags them with a score. So, I want to tell SA to score any message tagged by Clamav for a score of 100 (or whatever) Then, when I dump high sco

RE: How to discard spam mails

2005-08-23 Thread Greg Allen
. > > There are other mail handlers like Amavisd-new which might also have the > functionality you want. > > Pierre Thomson > BIC > > > -Original Message- > From: Greg Allen [mailto:[EMAIL PROTECTED] > Sent: Tuesday, August 23, 2005 3:07 PM > To: Forrest Ald

Re: How to discard spam mails

2005-08-23 Thread Greg Allen
I find this one issue just about the most annoying 'non-feature' of SA. I have a site-wide config (procmail does not work sitewide) and I don't want the overhead and problems of a huge milter program laying in front of SA just to block any email over 15 stars. I like to keep it simple stupid. I am

RE: They're moving now from uk.geocities.com to spaces.msn.com now...

2005-08-18 Thread Greg Allen
Your example (220.191.29.240) shows to still be sending from a China IP however, so they have been consistent about sending from China. So... if you don't need China... (ut oh, I might get called a nazi again for this message, ;-) ) > -Original Message- > From: Rick Macdougall [mailto:[E

RE: URIDNSBL: found domain geocities.com in skip list

2005-08-17 Thread Greg Allen
Their china, Russia and Korea RBLs are still working for me. I can't tell you if they work 100% or not but they are on every single Geocities spam, and I see them on other spams as well... so, I don't know about timeouts on the RBLs, whether that is truth or fiction. Yes, their website is up and do

RE: URIDNSBL: found domain geocities.com in skip list

2005-08-16 Thread Greg Allen
This question is getting asked over and over, it's probably about time to start referring to the archives to not annoy the list users. But, one more time...Here is another rule that will help catch the Geocities spam. (reposted twice now) Here is an RBL test for china IP addresses that connect to

Re: Bonded Sender

2005-08-15 Thread Greg Allen
First thing I do whenever do an upgrade of SA is to go through and zero out any rules that suppose someone is a good player. I don't believe in someone being able to pay to send my system spam. Any such whitelist systems will eventually be abused IMO. Spammers look at SA rules and take the easiest

RE: tsa vs., well, us

2005-08-14 Thread Greg Allen
I don't have a problem with SA whitelisting the TSA or any other government agency. The only thing that I would need before whitelisting is for each agency to post a video on their website of all senior management removing their shoes, their clothes, pass through a metal detector, submit to a body

RE: How to get rid of these messages ?

2005-08-12 Thread Greg Allen
Here is another rule that will help. (reposted from about a week ago) Here is an RBL test for china IP addresses that connect to your server to pass email. I tested it and it works. I have score of 5 for a while, but you can change that for anything you want. Add it to your local.cf if you like it

RE: Phishing IP listed in URIBL and SURBL, but not triggering URI rules

2005-08-11 Thread Greg Allen
This is a very, very dangerous road to go down. You would see a lot of collateral damage by doing a URIBL by IP. A lot of domain hosts these days use shared IPs. I could host any number of legit websites on one virtual IP…and I do. I share IPs with any number of other websites at the web hosting co

RE: When is Bulk "Bulk"

2005-08-09 Thread Greg Allen
I believe this is why services such as Yahoo email started calling it "bulk" instead of "spam". I also call it bulk to my users for the same reason. It's much easier to define bulk than it is to define spam. Spam is in the eye of the beholder as you can even see on this list. But I must say, some

RE: GeoCities Link-only spam

2005-08-09 Thread Greg Allen
I went with the RBL method. More than 1 way to skin a spammer. :-) Anyways, they put themselves into my bayes with the extra points of the china RBL. Life is good... Now I can back down on the China points some since my bayes will more likely catch this garbage. Content preview: myrtis http

RE: When is Bulk "Bulk"

2005-08-09 Thread Greg Allen
> -Original Message- > From: Mike Wiebeld [mailto:[EMAIL PROTECTED] > Sent: Tuesday, August 09, 2005 4:49 PM > To: users@spamassassin.apache.org > Subject: RE: When is Bulk "Bulk" > > > > >>> "Rob McEwen" <[EMAIL PROTECTED]> wrote on 08/09/05 01:36PM: > > Of course I don't propose any sor

Re: When is Bulk "Bulk"

2005-08-09 Thread Greg Allen
I got an email to my postmaster account one time, at a job I was working, from a guy in the Philipines who buys and sells domains. Just so happened a VP at the company loved the domain name and was thrilled to buy it for something like $150 cheap. I don't mind cold emails as much as cold calls on m

RE: GeoCities Link-only spam

2005-08-08 Thread Greg Allen
Here is an RBL test for china IP addresses that connect to your server to pass email. I tested it and it works. I have score of 5 for a while, but you can change that for anything you want. Add it to your local.cf if you like it. You should be able to modify for other countries, see the country li

RE: GeoCities Link-only spam

2005-08-08 Thread Greg Allen
lol I look at it like this. My users (certain ones) want to be able to receive an odd internet email/order of lets say...copier parts from someone in China. Now, the odds are they won't get more than 1 email every 6 months from China. So, they get pounded with China spam for 6 months hoping for o

RE: [SPAM] RE: GeoCities Link-only spam

2005-08-08 Thread Greg Allen
Sorry, I misunderstood at first what you had there. You are checking uri... This is good, but it might be even better to have a check for connecting IP (or use in conjunction with the uri) since the spammers can auto-flip websites from UK, to china, Korea, RU, etc within a few seconds. I am not a

RE: GeoCities Link-only spam

2005-08-08 Thread Greg Allen
, 2005-08-07 at 12:27 -0400, Greg Allen wrote: > >> They are also using non-Geocities addresses now. Most of the IPs they > >> use seem to been from China, so you could RBL china at the front end, > >> if you are allowed to block China that is... (my use

RE: Blocking specific domains

2005-08-08 Thread Greg Allen
Title: Blocking specific domains That would be a Postfix question, not SA.   SA only tags, it does not block.   Lookup smtpd_client_restrictions for postfix.     -Original Message-From: Fettke, Dirk [mailto:[EMAIL PROTECTED]Sent: Monday, August 08, 2005 5:48 AMTo: users@spam

RE: GeoCities Link-only spam

2005-08-07 Thread Greg Allen
?djBK=nNSn7m ---end example--- -Original Message- From: Rakesh [mailto:[EMAIL PROTECTED] Sent: Sunday, August 07, 2005 10:51 AM To: Michele Neylon Cc: Raymond Dijkxhoorn; Greg Allen; Kelson; [EMAIL PROTECTED] Apache. Org Subject: Re: GeoCities Link-only spam O

RE: GeoCities Link-only spam

2005-08-06 Thread Greg Allen
Yea...here is an example. They are getting through here to and I have everything turned on except dcc and razor. Here is an example. Hopefully they will use up all their spam IPs and start getting blocked by RBLs. These type break-throughs usually don't last too long. -start-

RE: Adding SpamBouncer phishing data to ph.surbl.org

2005-07-31 Thread Greg Allen
I agree, we definitely need SURBL black lists. They have helped tremendously against spam! I just feel that it would be chasing one's tail a bit to try to catch phishing in SURBL. People who do phishing are going to change their IP address (IP where the actual target/sucker is sent) frequently. Th

RE: Adding SpamBouncer phishing data to ph.surbl.org

2005-07-30 Thread Greg Allen
It seems like this would be a hard thing to do by IPs. If you were to use Clamav and the Spamassassin hook (see wiki for it), you may get better near real-time phishing protection. That is what I do here any way. I give Clamav a 100 score. That's my 2 cents anyway. -Original Message- Fro

RE: Rule Advice

2005-07-13 Thread Greg Allen
If I am reading this correctly it looks like SA is working perfectly. SA admins generally don't care much for kids sending email to our servers from their mom's computers while she is at work... well u get the idea. But I am guessing your friend already knows that. -Original Message- From

RE: Starting SA with Procmail

2005-07-05 Thread Greg Allen
[mailto:[EMAIL PROTECTED] Sent: Tuesday, July 05, 2005 8:21 AM To: [EMAIL PROTECTED] Cc: users@spamassassin.apache.org Subject: Re: Starting SA with Procmail Greg Allen wrote: > [snip] > > The only thing that might be unusual about my install is that the server > does not hold email. I pa

RE: More spam since upgrading

2005-07-04 Thread Greg Allen
Title: More spam since upgrading I filter a fair amount of email with 3.0.4, and very little spam ever gets through these days. Almost none actually.   Make sure you have everything working correctly. run the command   spamassassin -D --lint   Look very very carefully in the results for an

RE: Starting SA with Procmail

2005-07-03 Thread Greg Allen
I'm giving up on procmail. It is poorly supported and appears to only work for local delivery (user mailbox must exist on the box) as far as I can tell. I am using SA as an email gateway, and I just don't think procmail works that way from the little I can find on the subject. Procmail doesn't even

Starting SA with Procmail

2005-07-03 Thread Greg Allen
I am running SA 3.0.4, and Postfix 2.2 on Redhat 8.0. I am trying to change the way I start my SA installation in order to be able to filter out high ranking spam scores. I am currently sending emails to SA via a filter script similar to what is described here. http://advosys.ca/papers/postfix-fi

RE: upgrade to SA 3.0.3 - pod2man path issue

2005-04-30 Thread Greg Allen
It is Redhat 8.0 so this may apply. I will check it out. Thanks -Original Message- From: Bill Landry [mailto:[EMAIL PROTECTED] Sent: Saturday, April 30, 2005 5:42 PM To: [EMAIL PROTECTED]; users@spamassassin.apache.org Subject: Re: upgrade to SA 3.0.3 - pod2man path issue - Origina

upgrade to SA 3.0.3 - pod2man path issue

2005-04-30 Thread Greg Allen
FYI: Ok, I just tried upgrading 3.0.2 to 3.0.3 and get the following -- During install, after I run: perl Makefile.PL It asks me a few setup questions then I get: Warning: I could not locate your pod2man program. Please make sure, your pod2man program is in your PATH before y

RE: Restarting SPAMD

2005-03-24 Thread Greg Allen
I think this is how I have mine setup (it's been a while). I have an icon pointing to this command. /etc/rc.d/init.d/spamassassin restart Check to see if you have the 'spamassassin' file in init.d for use with the above command. -Original Message- From: jdow [mailto:[EMAIL PROTECT

RE: Effectiveness

2005-03-24 Thread Greg Allen
I like the new URL black lists in SA so much I gave them all 4 points each (but do that at your own risk). Bayes is even doing better now as a result of the better auto-learning with the URL black lists. I also now give Bayes 99 (5) points (all other bayes points are default or less) and no false p

RE: DCC License Change

2005-03-20 Thread Greg Allen
I read through some of these postings at rhyolite.com. It sounds to me like DCC should be off in SA by default going forward, or possibly completely removed from SA future versions so users don't accidentally get in a license/legal dispute without their knowledge. For instance...Jump two years int

RE: SA 3.0.2 MASSIVE memory cpu problems

2005-03-16 Thread Greg Allen
Some users have had problems with corrupt AWL database after upgrade of Spamassassin. Try disabling AWL to see if that is your issue. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 16, 2005 5:44 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Su

RE: Sudden spam to this email address

2005-03-15 Thread Greg Allen
, if you post to this list use a throw-away email address unless you are looking to have a good test account for SA. :-) -Original Message- From: Greg Allen [mailto:[EMAIL PROTECTED] Sent: Monday, March 14, 2005 11:36 PM To: users@spamassassin.apache.org Subject: Sudden spam to this

Sudden spam to this email address

2005-03-15 Thread Greg Allen
Does posting to this list open me up to dweebs harvesting email addresses? I'm suddenly getting BS spams to this email address, and they have to be coming from one of two sources. This list being one of the options. Thanks.

RE: DCC in Spamassassin

2005-03-13 Thread Greg Allen
My dcc on RedHat 8.0 is located in /var/dcc directory You should see DCCIFD there as well. I had to change a line in the /var/dcc/dcc_conf to DCCIFD_ENABLE=ON Also, make sure you install the latest DCC with DCCIFD from the Rayolite website (if you do not have it). Put the path to DCC in your

RE: RCVD_IN_BSP_TRUSTED

2005-03-11 Thread Greg Allen
I have a fix for that score RCVD_IN_BSP_TRUSTED 0 I don't give big negative points to anyone. To each his own though. -Original Message- From: Robert Menschel [mailto:[EMAIL PROTECTED] Sent: Thursday, March 10, 2005 8:29 PM To: R McGlue Cc: [EMAIL PROTECTED] Subject: Re: RCVD_IN

RE: I can't autolearn bayes databases with spam - continuation

2005-03-10 Thread Greg Allen
If you still have this, it is not going to work, as I said. bayes_auto_learn_threshold_nonspam 0.1 bayes_auto_learn_threshold_spam 7.0 -Original Message- From: mw [mailto:[EMAIL PROTECTED] Sent: Thursday, March 10, 2005 5:33 AM To: users@spamassassin.apache.org Subject: I

RE: More problems was Re: DB_FILE error causes serious deep recursion/system overloading problem

2005-03-08 Thread Greg Allen
ystem overloading problem Greg, How large was auto-whitelist? I just renamed mine and it was about 85Megs. Ironically, I have a VERY old one in the same directory that was about the same size. - Original Message - From: "Greg Allen" <[EMAIL PROTECTED]> To: <[

RE: 20_dnsbl_tests.cf

2005-03-07 Thread Greg Allen
They work by default but you must have DNS support installed. Find them on cpan.org Run spamassassin -D --lint and look for files that need to be installed. If you have DNS installed it should make calls assign points to spam. Once you get DNS working, you can also created custom blacklist entrie

RE: DB_FILE error causes serious deep recursion/system overloading problem

2005-03-07 Thread Greg Allen
This is not good. You should make sure that you upgraded all of the supporting files including db_file to latest from cpan.org run spamassassin -D --lint to see what files it uses and upgrade those. You need to get your db working again it looks like to me. -->debug: bayes: no dbs present, canno

RE: More problems was Re: DB_FILE error causes serious deep recursion/system overloading problem

2005-03-07 Thread Greg Allen
I had a problem with auto-whitelist. I had errors writing to it when I tested with spamassassin -D --lint I went to the auto-whitelist directory /var/spool/filter/.spamassassin and renamed the auto-whitelist file to auto-whitelist.old The system created a new auto-whitelist and so far so good.

RE: How to setup Spamassassin. Novices with no or little mastery of computers.

2005-03-05 Thread Greg Allen
You appear to be a 'user'. This is not a 'user' mailing list. It is for system admins and developer types who install or configure spamassassin on their servers at a system level. You should be talking with your system administrator who installed SA rather than abusing this list. -Original M

RE: Another one without rules for it

2005-03-03 Thread Greg Allen
user to user post (I am not a developer) Are you using DCC, Pyzor or any RBLs on the front end or any custom SpamAssassin RBL rules? Maybe that would help you on these types. Much of the power of SA is it's ability to check outside sources such as these, so you don't have to rely 100% on just text

RE: Suggestion: OCR

2005-03-03 Thread Greg Allen
User to user post... ( I am not a developer) I can see where this my be something to consider 10 or 20 years from now when we all have supercomputers in our pockets. :-) But until then... I would concentrate on implementing the latest Spamassassin 3.0.2 It is a bit of work to get it working cor

RE: I don't think the URIDNSBL is working on spams yet

2005-03-01 Thread Greg Allen
esday, March 01, 2005 2:58 AM To: Greg Allen Cc: Matt Kettler; users@spamassassin.apache.org Subject: Re: I don't think the URIDNSBL is working on spams yet On Monday, February 28, 2005, 11:44:33 PM, Greg Allen wrote: > OK, just did that. Sent from Yahoo email into my system, no luck. If

RE: I don't think the URIDNSBL is working on spams yet

2005-03-01 Thread Greg Allen
Mon, 28 Feb 2005 23:37:47 -0800 (PST) From: Greg Allen <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Subject: test To: [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="0-1741638910-1109662667=:15898" X-Spam-Checker-Version: SpamAssassin 3.0.2

I don't think the URIDNSBL is working on spams yet

2005-03-01 Thread Greg Allen
Just did upgrade from SA 2.63 to SA 3.0.2, everything looks good, but I don't see any evidence that URIDNSBL is doing anything to spam emails so far. Here is the output. Is it broke? Thanks for any help. [EMAIL PROTECTED] filter]$ spamassassin -D < test.txt debug: SpamAssassin version 3.0.2

RE: Help needed with rewrite_header and Spamassassin 3.0.2 on Linux

2005-03-01 Thread Greg Allen
Here you go... http://wiki.apache.org/spamassassin/SubjectRewrite -Original Message- From: Tom Q. Citizen [mailto:[EMAIL PROTECTED] Sent: Monday, February 28, 2005 10:53 PM To: users@spamassassin.apache.org Subject: Help needed with rewrite_header and Spamassassin 3.0.2 on Linux Hi!

RE: Amazon is killing me....

2005-02-28 Thread Greg Allen
Doesn't look like spamassassin. I think maybe you should look at your Clamv virus attachment config http://www.clamav.net/ or call the guy you laid off who setup the clam av filter. :-) -Original Message- From: Eric [mailto:[EMAIL PROTECTED] Sent: Monday, February 28, 2005 12:36 AM To:

I wonder how Google would deal with this one :-)

2005-02-28 Thread Greg Allen
I got this spam on Sat 2/12/2005. You sometimes have to admire the work that goes into this non-sense. At first I thought it was an image. But it is not. Notice the words are made up of very small text arranged into bigger text which creates words.        ---snip-

Is there a reverse DNS (rdns) test in SA 3.0.2

2005-02-27 Thread Greg Allen
I am looking at the SA files and have not found any info about this yet. Does SA 3.0.2 test for a reverse DNS (A record) on a connecting mail server and assign a point value for servers with no reverse DNS? Thanks

Upgrade SA from 2.63 to 3.02 file conflicts message

2005-02-27 Thread Greg Allen
I downloaded SpamAssassin in tar.gz format from spamassassin.org I have a working SA version 2.63 that has been running for months. I wish to do the upgrade to 3.0.2. I ran rpmbuild -tb Mail-SpamAssassin-3.0.2.tar.gz Went to the correct i338 RPM directory Ran rpm -i (perl file name ) (spamassas