> So my rule:
> # hotmail drug spam
> uri MY_HOTMAIL_SPAM
> m{https?://{1,30}\.{1,30}\.(com|ru|cn)/[0-9][0-9][0-9][0-9]/i}
> describe MY_HOTMAIL_SPAM Druggy hotmail.com links
> score MY_HOTMAIL_SPAM 5.0
>
> And running emails through it using -D, it does not hit it as far a
On Sat, 19 Dec 2009 10:06:11 -0600
Dave Pooser wrote:
> share the code so that some of us could auto-generate rules based on
> our own ham/spam mailstreams, and then share those rules with you for
> possible SOUGHT inclusion?
I think that's already done, though not well documented; check
$SRC/mas
On Tue, 30 Dec 2008 09:55:52 +
"Justin Mason" wrote:
> Does the sa-compile step complete with an exit code of 0? If there
> are problems with re2c (which has happened in the past) it should exit
> with !=0.
There were no errors visible in the output, but the script I was using
to do the upd
On Mon, 29 Dec 2008 23:21:48 +
j...@jmason.org (Justin Mason) wrote:
> hmm. What do you have in /var/lib/spamassassin for the scores files?
> they should look like this:
>
> : 183...; ls
> -l /var/lib/spamassassin/3.002006/updates_spamassassin_org/50_scores.cf
> /var/lib/spamassassin/3.002
Hey, all,
I have a bunch of servers that picked up a rule update, 729912 this
morning about 10am EST, at which point all hell broke loose---scores for
everything but bayes dropped to almost nothing.
Has anyone else experienced anything like this?
Mike.
On Tue, 21 Aug 2007 16:56:27 -0500
Andy Sutton <[EMAIL PROTECTED]> wrote:
> On Tue, 2007-08-21 at 13:42 -0700, John Rudd wrote:
> > b) Botnet gets 0% false positives at one of my services (not just
> > "borked DNS == bad", as you're suggesting, but actual "everything
> > that triggered botnet was
On Tue, 21 Nov 2006 13:42:09 +0100
Jonas Eckerman <[EMAIL PROTECTED]> wrote:
> > CREATE TABLE bayes_token (
> > PRIMARY KEY (id, token),
> > INDEX bayes_token_idx1 (token),
> > INDEX bayes_token_idx2 (id, atime)
> > ) TYPE=MyISAM;
>
> > PRIMARY for `id` and `token` should not have INDEX for
On Thu, 16 Nov 2006 17:56:21 -0800
Derek Harding <[EMAIL PROTECTED]> wrote:
> On Sun, 2006-11-12 at 17:26 -0800, John Rudd wrote:
>
> > http://people.ucsc.edu/~jrudd/spamassassin/RelayChecker.tar
>
> I've been running this for a few days now and am finding it to be
> pretty effective, especially
