Undeliverable mails

2008-06-04 Thread Jack Gostl
I'm not sure if this can even be handled, but I thought I'd put it out there. Someone is using our email address to originate spam. We are getting bombed with "Mail undeliverable" etc. messages from failed spam delivery attempts. This morning I check my inbox and found almost 100 of these since

Re: whitelist

2007-12-09 Thread Jack Gostl
- Original Message - From: "Daryl C. W. O'Shea" <[EMAIL PROTECTED]> To: "Matt Kettler" <[EMAIL PROTECTED]> Cc: "Jack Gostl" <[EMAIL PROTECTED]>; "spam" Sent: Thursday, December 06, 2007 11:08 PM Subject: Re: whitelis

Re: whitelist

2007-12-06 Thread Jack Gostl
- Original Message - From: "Matt Kettler" <[EMAIL PROTECTED]> To: "Jack Gostl" <[EMAIL PROTECTED]> Cc: "spam" Sent: Thursday, December 06, 2007 8:19 PM Subject: Re: whitelist Matt Kettler wrote: Jack Gostl wrote: I have an odd problem. I

whitelist

2007-12-06 Thread Jack Gostl
-BEGIN PGP SIGNED MESSAGE- I have an odd problem. I have a user receiving spam from something like [EMAIL PROTECTED] Since he does business with verybigcompany.com, he had them in his white list, and as expected, the spam slipped through. Based on the advice I got in this newsgroup, I ch

Re: Message bypassed

2007-12-01 Thread Jack Gostl
- Original Message - From: "mouss" <[EMAIL PROTECTED]> To: "Spamass" Sent: Saturday, November 24, 2007 1:19 PM Subject: Re: Message bypassed Jack Gostl wrote: I was trying to figure out why a piece of spam got through with no spamassassin headers at

Re: Message bypassed

2007-11-24 Thread Jack Gostl
Jack Gostl wrote: I was trying to figure out why a piece of spam got through with no spamassassin headers at all. I finally found this message in my log: spamc[523292]: skipped message, greater than max message size (256000 bytes) The message was close to 2mb, including a very

Message bypassed

2007-11-24 Thread Jack Gostl
I was trying to figure out why a piece of spam got through with no spamassassin headers at all. I finally found this message in my log: spamc[523292]: skipped message, greater than max message size (256000 bytes) The message was close to 2mb, including a very, very large bmp file. Does anyo

Spam from whitelisted senders

2007-11-18 Thread Jack Gostl
-BEGIN PGP SIGNED MESSAGE- I'm looking for a suggestion on this. I have a customer that is a large company. I put an entry in my whitelist of the form whitelist_from[EMAIL PROTECTED] Now I get a constant trickle of spam from addresses like [EMAIL PROTECTED] Adding in

AIX and SpamAssassin 3.2.2

2007-07-30 Thread Jack Gostl
Hello all: I'm trying to build Spamassassin 3.2.2 under AIX 5.3 with the AIX compilers. I get the following errors while compiling spamc. "spamc/libspamc.c", line 1050.14: 1506-275 (S) Unexpected text strm encountered. "spamc/libspamc.c", line 1050.5: 1506-045 (S) Undeclared identifier z_stream.

Re: Bayes resolution gettin weaker

2007-02-12 Thread Jack Gostl
Well... I'm convinced. I turned off autolearn a week ago, and things have never been smoother. Its a shame really, that's a nice feature, but for some reason it waters down the Bayes resolution until its almost useless. - Original Message - From: "Jack Gostl" &l

Re: Bayes resolution gettin weaker

2007-02-05 Thread Jack Gostl
- Original Message - From: "Anthony Peacock" <[EMAIL PROTECTED]> To: "SpamAssassin" Sent: Monday, February 05, 2007 3:56 AM Subject: Re: Bayes resolution gettin weaker Hi, Jack Gostl wrote: I've been watching this for awhile, and there is now a pat

Re: Bayes resolution gettin weaker

2007-02-03 Thread Jack Gostl
I've been watching this for awhile, and there is now a pattern to what I'm seeing. I'm running a configuration with multiple users sharing a bayes files. This is an interim move to facilitate the spamassassin upgrades, and like many interim moves its been going on for a long time. When I fir

Bayes resolution gettin weaker

2007-02-03 Thread Jack Gostl
I've been watching this for awhile, and there is now a pattern to what I'm seeing. I'm running a configuration with multiple users sharing a bayes files. This is an interim move to facilitate the spamassassin upgrades, and like many interim moves its been going on for a long time. When I first

Re: Bayes

2007-01-26 Thread Jack Gostl
I thought I'd mention that since I wiped and rebuilt my Bayes files my success rate has jumped from 93% to 99+%. Considering the amount of spam pouring into here, that's not bad at all. - Original Message - From: "Anthony Peacock" <[EMAIL PROTECTED]> Cc: Sent: Friday, January 26, 200

Fw: Bayes

2007-01-26 Thread Jack Gostl
- Original Message - From: "Jack Gostl" <[EMAIL PROTECTED]> To: "Anthony Peacock" <[EMAIL PROTECTED]> Sent: Friday, January 26, 2007 7:30 AM Subject: Re: Bayes Whenever some spam slips through the filters, I save it in a separate folder. Then, eac

Re: Bayes

2007-01-26 Thread Jack Gostl
anges, that your Bayes has become poisoned. But I could be well wrong. On Fri, 26 Jan 2007 06:09:24 -0500 "Jack Gostl" <[EMAIL PROTECTED]> wrote: The amount of spam getting through my filters has been steadily increasing. From a start of under two percent up to over ten percent.

Bayes

2007-01-26 Thread Jack Gostl
The amount of spam getting through my filters has been steadily increasing. From a start of under two percent up to over ten percent. It was getting pretty bad, so I finally, just on a hunch, I wiped my Bayes files and rebuilt them. And, voila!, I'm now running under one percent. Has anyone els

Dear Homeowner spam

2007-01-22 Thread Jack Gostl
Well its back. I thought my bayes files had finally caught up to it, or maybe one of the sa-update downloads did the trick, but now it returns like bad meatloaf. It astounds me how this slips under the Bayes radar.

Re: "Dear Homeowner" spam

2007-01-11 Thread Jack Gostl
- Original Message - From: "Justin Mason" <[EMAIL PROTECTED]> To: "John Andersen" <[EMAIL PROTECTED]> Cc: Sent: Thursday, January 11, 2007 9:34 AM Subject: Re: "Dear Homeowner" spam John Andersen writes: On Tuesday 09 January 2007 06:47

Re: "Dear Homeowner" spam

2007-01-09 Thread Jack Gostl
Now that you mention it, yes, it had a Geocities URL. - Original Message - From: "John Andersen" <[EMAIL PROTECTED]> To: Sent: Saturday, January 06, 2007 10:09 PM Subject: Re: "Dear Homeowner" spam

"Dear Homeowner" spam

2007-01-03 Thread Jack Gostl
I've been getting a bunch of spam hawking mortgage rates. You may have seen it, it starts with "Dear Homeowner." Tthe only test that flags this message is "BAYES_50", for all practical purposes a score of 0. What concerns me the most is that this triggers "autolearn=ham". I later feed this

Re: Odd spam

2006-12-17 Thread Jack Gostl
I guess I could do that, but these things usually only last a few days anyway. Always have to trade off against the risk of a non-spam message coming through. I was really surprised that the Bayes came up zero. - Original Message - From: "Ken A" <[EMAIL PROTECTED]>

Odd spam

2006-12-17 Thread Jack Gostl
I'm getting dozens of messages touting a stock called TTEN. The odd thing about the messages is that its getting assigned a Bayes score of zero. Are there any rules out there for this? Thanks Jack

bayes error

2006-12-02 Thread Jack Gostl
I've been looking at the spams that slip through, and I notice that they have no Bayes score. Not a low score, but no score. I suspect that is tied to this message in my log: Dec 2 02:00:44 web01 spamd[21664]: bayes: cannot open bayes databases /home/gostl/.spamassassin/bayes_* R/W: lock

Re: saupdate

2006-11-23 Thread Jack Gostl
- Original Message - From: "Craig Morrison" <[EMAIL PROTECTED]> To: "Jack Gostl" <[EMAIL PROTECTED]> Cc: "spamassassin" Sent: Thursday, November 23, 2006 3:01 PM Subject: Re: saupdate Jack Gostl wrote: - Original Message - Fro

Re: saupdate

2006-11-23 Thread Jack Gostl
- Original Message - From: "Craig Morrison" <[EMAIL PROTECTED]> To: "Jack Gostl" <[EMAIL PROTECTED]> Cc: "spamassassin" Sent: Thursday, November 23, 2006 2:40 PM Subject: Re: saupdate Please keep replies on the list for the benefit of othe

saupdate

2006-11-23 Thread Jack Gostl
I'm trying to understand saupdate and how to use it. I have two questions. I'm running AIX 5.3. Question 1: I run the following command: /usr/opt/perl5/bin/sa-update --nogpg -D --updatedir /tmp/update It finishes with a return code of 1. It sounds to me like something failed. I can't find an

Re: Conversion

2006-11-14 Thread Jack Gostl
;[EMAIL PROTECTED]> To: "Jack Gostl" <[EMAIL PROTECTED]> Cc: "spam" Sent: Tuesday, November 14, 2006 9:37 PM Subject: Re: Conversion Jack Gostl wrote: I've just done a trial conversion from spamassassin 3.0.3 to 3.1.7 and the bayes return codes aren't being

Conversion

2006-11-14 Thread Jack Gostl
I've just done a trial conversion from spamassassin 3.0.3 to 3.1.7 and the bayes return codes aren't being set. I should point out that this is a "new" machine, and its entirely possible that I missed moving something.   I installed the various CPAN pre-reqs, installed SpamAssassin, then mov

Re: Image only spam

2006-07-14 Thread Jack Gostl
Converting to 3.1 is beginning to look better and better. Thanks - Original Message - From: "Steven Stern" <[EMAIL PROTECTED]> To: "Spamass" Sent: Friday, July 14, 2006 8:11 AM Subject: Re: Image only spam Jack Gostl wrote: - Original Message

Re: Image only spam

2006-07-13 Thread Jack Gostl
- Original Message - From: "Steven Stern" <[EMAIL PROTECTED]> To: "Spamass" Sent: Wednesday, July 12, 2006 4:31 PM Subject: Re: Image only spam Jack Gostl wrote: Thanks for the response. Take it slow with me, spamassassin has been running so well for s

Re: Image only spam

2006-07-12 Thread Jack Gostl
  - Original Message - From: Steven Stern To: Spamass Sent: Wednesday, July 12, 2006 4:31 PM Subject: Re: Image only spam Jack Gostl wrote:> Thanks for the response.>> Take it slow with me, spamassassin has been running so well for so > long that I haven't had to

Re: Image only spam

2006-07-12 Thread Jack Gostl
- Original Message - From: "Loren Wilton" <[EMAIL PROTECTED]> To: Sent: Wednesday, July 12, 2006 1:48 PM Subject: Re: Image only spam (1) I currently have no local.cf. I assume the default location is /etc/mail/spamassassin. This seems rather amazing. This is the normal place tha

Re: Image only spam

2006-07-12 Thread Jack Gostl
006 at 10:48 AM, Bowie Bailey <[EMAIL PROTECTED]> wrote: Jack Gostl wrote:> Thanks for the response.> > Take it slow with me, spamassassin has been running so well for so> long that I haven't had to fiddle with it in ages and I don't> remember the details. D

Re: Image only spam

2006-07-12 Thread Jack Gostl
From: "Steven Stern" <[EMAIL PROTECTED]> To: "Spamass" Sent: Wednesday, July 12, 2006 9:13 AM Subject: Re: Image only spam Jack Gostl wrote: I'm running SpamAssassin version 3.0.3 running on Perl version 5.8.2 under AIX 5.3. Starting a few months ago, I have b

Image only spam

2006-07-12 Thread Jack Gostl
I'm running SpamAssassin version 3.0.3 running on Perl version 5.8.2 under AIX 5.3. Starting a few months ago, I have been absolutely inundated with "image only spam". I've gone from catching 99% of the spam with almost no false positives to less than 85%. I asked about this awhile ago, and t

All image spam

2006-03-07 Thread Jack Gostl
I've seen some references to this in threads, but I didn't see an answer.   Starting in late November, we started getting hit with spam that was almost entirely a jpeg. They seem to be mostly "stock recommendations". There is minimal message, usually HTML, and the real spam content is in the

Whitelists

2005-08-09 Thread Jack Gostl
Indulge me for a moment. It has been much too long since I thanked the developers of this program. You have no idea what a difference it has made in my life. I have an "old" address, one that's been around for almost ten years, and spamassassin catches more than 1000 spams a day aimed directly

RBL lists

2005-06-28 Thread Jack Gostl
Some how my domain has gotten itself blacklisted. Can anyone suggest how I can find out where the blacklisting occurred and how to get it undone? Thanks - Jack