Pyzor error

Hi,   I´m SpamAssassin user logn time ago but new in this list.   This is the problem:   I've just installed Pyzor (by the way in RH7.3 you need to install in a diferent way the instalation notes says).   I was using SpamAssassin inside a perl script (with mod_perl) to check for spam the outg

highly available sitewide bayes, local db vs. sql

What sort of experiences have people had managing a sitewide bayes db that is used by spamassassin (spamd|amavisd) instances on multiple machines? I've got an environment with spamassassin/amavisd-new running in parallel on a pool of two (but possibly more in the future) equally weighted machines.

RE: Porno

Title: Re: Porno Okay, SA is working but was about the routing.  Did it ever pass through SA?  Were there SA headers in the original message?  Did SA timeout because the machine is overloaded and just return the original email back to the MTA chain?   Granted SA thinks its spam but did SA

RE: Low scoring spam

Well all I did was run spamd -D /path/to/message Here is my local.cf. Am I missing something out of here? user_scores_dsn DBI:mysql:spamassassin:localhost:3306 user_scores_sql_password * user_scores_sql_username * user_scores_sql_custom_query SELECT pr

How to purge bayes?

How do I purge my bayes_* files? Especially, my bayes_journal is over 250 MB! I like it to re-init with a fresh start. But when I "echo -n >" the files, and restart SA, I get dbase errors. So, how can I easily go about this? Thanks, - Mark

Re: How to purge bayes?

Mark grabbed a keyboard and wrote: > > How do I purge my bayes_* files? Especially, my bayes_journal is over 250 > MB! I like it to re-init with a fresh start. But when I "echo -n >" the > files, and restart SA, I get dbase errors. So, how can I easily go about > this? When I had to do it some tim

RE: How to purge bayes?

> -Original Message- > From: David Guntner [mailto:[EMAIL PROTECTED] > Sent: donderdag 24 februari 2005 3:02 > To: users@spamassassin.apache.org > Subject: Re: How to purge bayes? > > > Mark grabbed a keyboard and wrote: > > > > How do I purge my bayes_* files? Especially, my > > bayes

RE: How to purge bayes?

Mark wrote: >> -Original Message- >> From: David Guntner [mailto:[EMAIL PROTECTED] >> Sent: donderdag 24 februari 2005 3:02 >> To: users@spamassassin.apache.org >> Subject: Re: How to purge bayes? >> >> >> Mark grabbed a keyboard and wrote: >>> >>> How do I purge my bayes_* files? Especi

Re: How to purge bayes?

Hello Mark, Wednesday, February 23, 2005, 5:33:43 PM, you wrote: M> How do I purge my bayes_* files? Especially, my bayes_journal is over 250 M> MB! I like it to re-init with a fresh start. But when I "echo -n >" the M> files, and restart SA, I get dbase errors. So, how can I easily go about M> t

Re: SA 3.01 eventually stops noticing DNSBLs

Jay Levitt wrote: [SNIP] I tried to create a test harness to see if I can replicate this outside of SA, but for some reason, even though I double-checked the code I copied from Dns.pm, I'm getting weird results - it's always giving me the root nameservers, instead of the name servers for each of

Re: How to purge bayes?

Larry Rosenman wrote: Mark wrote: -Original Message- From: David Guntner [mailto:[EMAIL PROTECTED] Sent: donderdag 24 februari 2005 3:02 To: users@spamassassin.apache.org Subject: Re: How to purge bayes? Mark grabbed a keyboard and wrote: How do I purge my bayes_* files? Especially, my bay

Re: Low scoring spam

Hello Robert, Not directly related to your problem, I don't think, but from your debug listing I see you're using the following rules files: > debug: config: read file ... > debug: config: read file /etc/mail/spamassassin/70_sare_random.cf > ... > debug: config: read file /etc/mail/spamassassin/ra

Re[2]: ENC: Wet 30 to 40 girls hrony and wants you

Hello Richard, Monday, February 21, 2005, 6:09:49 AM, you wrote: GR> Try these on for size: GR> header __PORN_WORD01 Subject =~/n(?:ex|xe)t door/i GR> header __PORN_WORD02 Subject =~/puss(?:y|ies)/i GR> ... header__PORN_WORD01 Subject =~ /n(?:ex|xe)t door/i header_

RE: How to purge bayes?

> -Original Message- > From: Robert Menschel [mailto:[EMAIL PROTECTED] > Sent: donderdag 24 februari 2005 3:28 > To: Mark > Cc: users@spamassassin.apache.org > Subject: Re: How to purge bayes? > > Don't purge/reinit the files, delete them. SA will recreate them > when it tries to check B

Re: highly available sitewide bayes, local db vs. sql

Ben Poliakoff wrote: Hi Ben What sort of experiences have people had managing a sitewide bayes db that is used by spamassassin (spamd|amavisd) instances on multiple machines? I've got an environment with spamassassin/amavisd-new running in parallel on a pool of two (but possibly more in the future

Re: SA 3.01 eventually stops noticing DNSBLs

Jay Levitt wrote: A quick test shows that indeed, an awful lot of domains are repeatedly failing in lookup_ns, but that different domains fail at different times - the domains that repeatedly fail right now were fine last night in the SA logs. So it looks like this is something (intermittment)

Re: How to purge bayes?

Am Donnerstag, 24. Februar 2005 08:23 schrieb Mark: > > -Original Message- > > From: Robert Menschel [mailto:[EMAIL PROTECTED] > > Sent: donderdag 24 februari 2005 3:28 > > To: Mark > > Cc: users@spamassassin.apache.org > > Subject: Re: How to purge bayes? > > > > Don't purge/reinit the fil

spamd setup

I have two mailhubs running exim (w/ exiscan) +SA+others I want to let them use each others spamd if the load gets too great on any one machine mailhub1 spamd: /usr/local/bin/spamd -d -r /logs/spamd.pid -m 7 \ -i -A 127.0.0.1,mailhub2IP exiscan: spamd_address = 127.0.0.1 783 : mailhub2IP

Character Sets in Subject and To/From

Hello, I got lots of messages with subjects of the form: Subject: =?utf-8?q?Wholesale Rolex Watc?= =?utf-8?q?hes?= Also mail Addresses use this type of obfuscation. My Question: How are thes character set changes handled by SpamAssassin rules and bayesian filtering. Best regards Thomas Are

Header Check

Can anyone tell me what this header check means: X-BLTSYMAVREINSERT    I have someone sending a power point presentation via email to our CIO but its getting blocked with this in the header.  What does it represent?   Thanks in advance   Jason

Re: Header Check

At 10:40 AM 2/24/2005, Jason Bennett wrote: Can anyone tell me what this header check means: X-BLTSYMAVREINSERT I have someone sending a power point presentation via email to our CIO but its getting blocked with this in the header. What does it represent? Thanks in advance I take it you're usin

RE: Low scoring spam

At 08:06 PM 2/23/2005, Robert Bartlett wrote: Well all I did was run spamd -D /path/to/message Is that a typo of spamc, or did you really try to feed a message to spamd?

RE: Low scoring spam

At 08:06 PM 2/23/2005, Robert Bartlett wrote: Well all I did was run spamd -D /path/to/message Wait.. even if it is a typo, it still won't work. You need to redirect things when calling spamc.. You can't pass it a filename. And spamc doesn't take a -D parameter, only spamd does... but spamd does

RE: Low scoring spam

spamd is aliases to spamassassin. I forgot to insert the < part in my email but that is what I did. Robert > At 08:06 PM 2/23/2005, Robert Bartlett wrote: > >>Well all I did was run spamd -D /path/to/message > > > Wait.. even if it is a typo, it still won't work. > > You need to redirect things w

RE: Low scoring spam

At 11:59 AM 2/24/2005, [EMAIL PROTECTED] wrote: spamd is aliases to spamassassin. Ok... May I ask why?

RE: mail scored 6.5 points lead to autolearn=spam

At 01:59 AM 2/19/2005, Philipp Snizek wrote: I had sorbs in airmax.cf and frenchrules.cf and have uncommented these rules. Why is sorbs a no-show? Is something wrong with sorbs? No, sorbs is still in SA, there's just no RCVD_IN_SORBS rule anymore.. That rule used to show up if any sorbs list match

Re: Character Sets in Subject and To/From

At 05:42 AM 2/24/2005, Thomas Arend wrote: I got lots of messages with subjects of the form: Subject: =3D?utf-8?q?Wholesale Rolex Watc?=3D =3D?utf-8?q?hes?=3D Also mail Addresses use this type of obfuscation. My Question: How are thes character set changes handled by SpamAssassin rules and bayesi

Re: spamassassin cant detect spam

Hi, thanks for ur help. actually i want to setup a mail server which is only for use outgoing mail. so, i cant chk it from outside of network as it is used for outgoing. so that i want to chk my spamassassin. but failure. i send a mail by using another email addr which content gets from GTUBE.

RE: spamassassin cant detect spam

Meshbah Uddin Ahmed wrote: > Hi, > > thanks for ur help. actually i want to setup a mail > server which is only for use outgoing mail. > > so, i cant chk it from outside of network as it is > used for outgoing. so that i want to chk my > spamassassin. but failure. > > i send a mail by using anot

RE: spamassassin cant detect spam

At 02:13 PM 2/24/2005, [EMAIL PROTECTED] wrote: > i send a mail by using another email addr which > content gets from GTUBE. but score is only 1.08. > whereas for spam need to be 5 score. Try turning off Auto Whitelist Even the AWL can't be the problem here.. The AWL has a factor of 0.5. Any messa

Re: Character Sets in Subject and To/From

Am Donnerstag, 24. Februar 2005 19:12 schrieb Matt Kettler: > At 05:42 AM 2/24/2005, Thomas Arend wrote: > >I got lots of messages with subjects of the form: > > > >Subject: =3D?utf-8?q?Wholesale Rolex Watc?=3D > > =3D?utf-8?q?hes?=3D > > > >Also mail Addresses use this type of obfuscation. > > >

Re: Character Sets in Subject and To/From

At 02:33 PM 2/24/2005, Thomas Arend wrote: When I understand you right my rolex rule is spoiled by this trick. Because header LOCAL_ENCSUBJECT Subject: =~ /rolex/i will not fire on these subjects. You misunderstood me completely. That rule should fire on those subject lines just fine. SA will a

MEDIA: It pays to read the EULA!!!

http://www.pcpitstop.com/spycheck/eula.asp "When Doug Heckman was installing a PC Pitstop program, he actually read the EULA. In it, he found a clause stating that he could get financial compensation if he e-mailed PC Pitstop. The result: a $1,000 check, and proof that people don't read EULAs (3,0

Millions and Billions

I've been seeing a ton of stock spam this week, no URLs - no SURBL :( Bayes and Razor, etc pick up on it eventually but to speed things up, I wrote a rule. One thing that is unique about these messages is that they replace l's with |'s. They usually will have some variation on Mil|ions or Bi|

Any tools to gauge bayes accuracy?

Before I actually write this, I'll aks to see if someone already has done it. On my imap server, I've got two different trash folders, one for ham, one for spam. Nothing new there. However, on the hour, I've got a script that runs sa-learn on them and records three things for each message: -

RE: Millions and Billions

Stuart Johnston wrote: > body L_MILLBILL /[mb]i(?:\|l|l\||\|\|)ions?/i > > Feel free to use it, make suggestions or point out that I wasted my > time writing a rule already available from SARE. > > Stuart Johnston How about (slightly easier to read) body L_MILLBILL /[mb]i[l|][l|]ions?/i or even

Re: Millions and Billions

[EMAIL PROTECTED] wrote: Stuart Johnston wrote: body L_MILLBILL /[mb]i(?:\|l|l\||\|\|)ions?/i Feel free to use it, make suggestions or point out that I wasted my time writing a rule already available from SARE. Stuart Johnston How about (slightly easier to read) body L_MILLBILL /[mb]i[l|][l|]ions?

RE: Millions and Billions

Stuart Johnston wrote: > [EMAIL PROTECTED] wrote: >> Stuart Johnston wrote: >> >>> body L_MILLBILL /[mb]i(?:\|l|l\||\|\|)ions?/i >> body L_MILLBILL /[mb]i[l|][l|]ions?/i > I started with something similar to that but it will also match > millions which we don't want. Touché! OK, how about body L

Re: Millions and Billions

On Thu, 24 Feb 2005, Stuart Johnston wrote: > [EMAIL PROTECTED] wrote: [snip..] > > > > How about (slightly easier to read) > > body L_MILLBILL /[mb]i[l|][l|]ions?/i > > or even > > body L_MILLBILL /[mb]i[l|]{2}ions?/i > > I started with something similar to that but it will also match millions >

Re: Millions and Billions

Hi, [EMAIL PROTECTED] wrote: Stuart Johnston wrote: [EMAIL PROTECTED] wrote: Stuart Johnston wrote: body L_MILLBILL /[mb]i(?:\|l|l\||\|\|)ions?/i body L_MILLBILL /[mb]i[l|][l|]ions?/i I started with something similar to that but it will also match millions which we do

Re: Millions and Billions

On Thursday 24 February 2005 05:42 pm, [EMAIL PROTECTED] wrote: > Stuart Johnston wrote: > > [EMAIL PROTECTED] wrote: > >> Stuart Johnston wrote: > >>> body L_MILLBILL /[mb]i(?:\|l|l\||\|\|)ions?/i > >> > >> body L_MILLBILL /[mb]i[l|][l|]ions?/i > > > > I started with something similar to that but