Re: how to config SA to scan mail from localhost

2005-05-10 Thread Evan Platt
At 09:16 PM 5/9/2005, you wrote: I'm testing the SA but my server can't connect to outside world. Thus, i've to send mail from localhost to myself to find how accurate SA is. Unfortunately, SA don't scan mails that sent from localhost. how can I reconfig it to scan every mail. You don't. You tell

Re: SpamCopURI not working, was RE: More Messed Up www URLs

2005-05-10 Thread Jeff Chan
On Monday, May 9, 2005, 8:50:43 AM, John Stewart wrote: > Hmmm... I just re-installed SpamCopURI 0.25. Still the same deal. Also tried > upgrading Net::DNS, but still no hits on the email containing this bad URL. > I am running an old perl... 5.6.0. Perhaps is it critical to be running > 5.8.2? >

Re: Difference in scores between spamc and spamassassin [RESOLVED]

2005-05-10 Thread Nick Gilbert
>> Surely they should both give exactly the same result? > > Maybe.. Depends a LOT on the options you pass to spamd when you start it. Yes you're right - there's an error in the scripts on Bill Shupps shupp.org site which I used to make my box - it was calling spamd with -L for some reason. I exp

Re: how to config SA to scan mail from localhost

2005-05-10 Thread Chris Lear
* Evan Platt wrote (10/05/2005 05:21): > At 09:16 PM 5/9/2005, you wrote: >>I'm testing the SA but my server can't connect to outside world. Thus, >>i've to send mail from localhost to myself to find how accurate SA is. >>Unfortunately, SA don't scan mails that sent from localhost. >> >>how can I

Re: how to config SA to scan mail from localhost

2005-05-10 Thread forum
Yes, you're right. I have just solved my first problem. Now, I can send e-mails via php and they are scanned by SA. My solution is using another computer to send e-mails across private lan. I'm trying to solve the second problem. It is how to send an e-mail with a fake header that is as like as he

Which part of code that SA use to compute Bayes score

2005-05-10 Thread forum
I can found only Bayes.pm and method tokenize that is used when learning an e-mail. I want to know which file that is used to compute Bayes score for incomming mail   Thanks Heng

The owner of the spamd-process

2005-05-10 Thread Johann Spies
If you look at the following output of "top" you will see that some spamd processes runs under the ownership of "spamd" and others under "root". I would like to know why? 16930 root 9 0 37908 37M 16548 S18.7 0.9 0:10 spamd 16927 root 11 0 83720 81M 16296 S10.7 2.1 0

smart spam using =2Eco=2Euk

2005-05-10 Thread sub
Hi, this spam jumped through my surbl rules (see below) They obviously used hex for the .(dot) - smart way to get around surbl. I am running sa 2.63 (I know, I need to upgrade), but is this likely fixed in newer releases ? regards Scott Farrell       Phone: 02-9411 3622  Mobile: 0412 927 156

Re: smart spam using =2Eco=2Euk

2005-05-10 Thread Jeff Chan
On Tuesday, May 10, 2005, 5:12:12 AM, sub sub wrote: > Hi, > this spam jumped through my surbl rules (see below) > They obviously used hex for the .(dot) - smart way to get around surbl. > I am running sa 2.63 (I know, I need to upgrade), but is this likely fixed > in newer releases ? My SA 2.

Parsing of undecoded UTF-8 will give garbage

2005-05-10 Thread Beast
How to turn off this warning? I'm using centos 4.0 [root]# cat /etc/sysconfig/i18n LANG="en_US" SUPPORTED="en_US:en" [root]# sa-learn --ham Ham-sample Parsing of undecoded UTF-8 will give garbage when decoding entities at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/HTML.pm line 182. TIA

Move all spam msg to spam mailbox

2005-05-10 Thread Beast
Hi all, I'm using postfix, spampd and SA (system wide). Any idea how to move all mail mark as spam to specifix mailbox so sombody could inspect the message and release or delete after feed it to sa-learn? Tks. -- --beast

Multiple spamassassin servers

2005-05-10 Thread Johnson, S
Hello,    I’ve got three SA 3.0  servers that I maintain.  Is it possible to use one server to update the baysian DB’s on the other 2 servers?  Or even copy them over to the other 2 servers?    Thanks =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Confidentiality Notice If the information in

Re: Multiple spamassassin servers

2005-05-10 Thread James R
Johnson, S wrote: Hello, I’ve got three SA 3.0 servers that I maintain. Is it possible to use one server to update the baysian DB’s on the other 2 servers? Or even copy them over to the other 2 servers? Thanks =-

Subscribing to spam lists

2005-05-10 Thread Johnson, S
Anyone know the best way to subscribe to receive all the spam I can possibly get?   Thanks     Disclaimer for the disclaimer:   I by no means authorized the following disclaimer, but thanks to our state government we are required to attach to all outbound emails. J

Re: Subscribing to spam lists

2005-05-10 Thread Fred
Post your e-mail address to some public newsgroups, get yourself active on anyplace that posts live e-mail addresses, if you built it (your name everywhere) they (spammers) will come. Frederic Tarasevicius Internet Information Services, Inc. http://www.i-is.com/ 810-794-4400 Johnson, S wrote: > An

Re: Subscribing to spam lists

2005-05-10 Thread Denis Liard
Johnson, S a écrit : Anyone know the best way to subscribe to receive all the spam I can possibly get? Thanks Disclaimer for the disclaimer: I by no means authorized the following disclaimer, but thanks to our state government we are required to attach to all outboun

Re: Subscribing to spam lists

2005-05-10 Thread Jeff Chan
On Tuesday, May 10, 2005, 7:59:20 AM, S Johnson wrote: > Anyone know the best way to subscribe to receive all the spam I can > possibly get? > Thanks IIRC the CDT study found that putting addresses on web sites was a very effective way to get them spammed: http://www.cdt.org/speech/spam/030319

RE: Subscribing to spam lists

2005-05-10 Thread Rob McEwen
One think I have found effective: Get permission to redirect e-mail from a client's former employees where that employee's address receives a ton of spam. I've gotten such permission from my client and I redirect that person's e-mail to my own box. Normally, such boxes of former employee would e

Re: Subscribing to spam lists

2005-05-10 Thread Duncan Hill
On Tuesday 10 May 2005 15:59, Johnson, S typed: > Anyone know the best way to subscribe to receive all the spam I can > possibly get? If you get a spam that has a link to a page for opting out, opt-out a spamtrap :) Also look for invalid local addresses that get rejected.  If they will never ma

Re: Subscribing to spam lists

2005-05-10 Thread Craig McLean
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Johnson, S wrote: | Anyone know the best way to subscribe to receive all the spam I can | possibly get? | | | Thanks A foolproof way used by the 419 eaters used to be: 1) search in google for "MUGU GUYMAN" 2) post a message in the resulting guestbook

Weighing spam with sa-learn

2005-05-10 Thread Johnson, S
  I’m looking at creating an email address to capture spam and only be used for spam.  Since I can be guaranteed that all email I received to this address is spam, is there a way to weigh this higher in the sa-learn?   =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Confidentiality Notice If th

Re: The owner of the spamd-process

2005-05-10 Thread Mike Jackson
If you look at the following output of "top" you will see that some spamd processes runs under the ownership of "spamd" and others under "root". I would like to know why? 16930 root 9 0 37908 37M 16548 S18.7 0.9 0:10 spamd 16927 root 11 0 83720 81M 16296 S10.7 2.1 0:

Re: Subscribing to spam lists

2005-05-10 Thread Nick Gilbert
> Get permission to redirect e-mail from a client's former employees where > that employee's address receives a ton of spam. This will NOT work. Receiving a spam after it has been forwarded is NOT the same as receiving the SPAM directly from the spammer. All the headers will be replaced with leg

Re: Weighing spam with sa-learn

2005-05-10 Thread Craig McLean
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Johnson, S wrote: > > > I’m looking at creating an email address to capture spam and only be > used for spam. Since I can be guaranteed that all email I received to > this address is spam, is there a way to weigh this higher in the sa-learn? > Spam i

RE: Subscribing to spam lists

2005-05-10 Thread Geoff Manning
> The only way to properly forward a spam is to forward it as an RFC822 > attachment and then unattach it at the receiving end. But I > expect this > is more hassle than you wanted... If you are using Exchange and you set your account to receive the email for that user. Then you should get the e

Re: Weighing spam with sa-learn

2005-05-10 Thread Matt Kettler
At 12:04 PM 5/10/2005, Johnson, S wrote: I'm looking at creating an email address to capture spam and only be used for spam. Since I can be guaranteed that all email I received to this address is spam, is there a way to weigh this higher in the sa-learn? No. Although exhaustive or weighted train

RE: Subscribing to spam lists

2005-05-10 Thread Rob McEwen
Nick, You make some good points which I'm sure others might need to know. In MY case, it doesn't matter because (1) I don't use bayes, (2) I'm forwarding between accounts on the SAME mail server and it happens to just copy the message file to the other folder WITHOUT adding additional headers. R

RE: SpamCopURI not working, was RE: More Messed Up www URLs

2005-05-10 Thread Stewart, John
Jeff Chan wrote: > Have you tried spamassassin -D < some_message and spamassassin > --lint? SA lints fine... running it in debug mode, it appears to not be checking anything but the multi records. See below. I've grepped through /usr/share/spamassassin and /etc/mail/spamassasin, and the only URI

Re: Subscribing to spam lists

2005-05-10 Thread Nick Gilbert
> Get permission to redirect e-mail from a client's former employees where > that employee's address receives a ton of spam. Also, I've just checked a former employee's account who hasn't worked here for a year or soa lot of the mail sitting in their mailbox isn't SPAM. It also included: -Mail

Cleaning up bayes SQL tables

2005-05-10 Thread Tim Bishop
I've been running with bayes in a MySQL database for a while now, and I need to start dealing with cleaning up users who are no longer here. I also have AWL and configuration in the database. So, I think I'm looking at something like the following to delete someone's data from the database: 1. De

RE: Subscribing to spam lists

2005-05-10 Thread Rob McEwen
>Also, I've just checked a former employee's Good points, Nick. Well, in that case, I'd go with Nick's suggestion that this is NOT a good way to build a spamtrap or bayes training corpus. But it still might be effective for "personal" use where an administrator would personally evaluate such mail

Re: Cleaning up bayes SQL tables

2005-05-10 Thread Michael Parker
On Tue, May 10, 2005 at 05:36:53PM +0100, Tim Bishop wrote: > I've been running with bayes in a MySQL database for a while now, and I > need to start dealing with cleaning up users who are no longer here. I > also have AWL and configuration in the database. > > So, I think I'm looking at something

problem with outlook97 client

2005-05-10 Thread Mario Rojas
I have problems with my client outlook97. Spamassassin adds some lines to the headed one of the mail, which generate that my client cannot lower the mail and by consequence they block my count POP3. I have spamassassin 2.64. The email are Spam, and the bayesiano does not identify them lik

RE: IPs in Header As Indicator Of Spam

2005-05-10 Thread Rob McEwen
Everyone would agree that if the sending server's IP address is listed on a respected RBL like SpamHaus, there is a very high percentage chance that that message is spam. (not that other additional testing shouldn't be done... but, looking at this alone, at least 99.9+% of the time, the message is

Re: Subscribing to spam lists

2005-05-10 Thread Kelson
Nick Gilbert wrote: Also, I've just checked a former employee's account who hasn't worked here for a year or soa lot of the mail sitting in their mailbox isn't SPAM. So reusing an old mailbox and assuming it must all be spam I would say is a very bad idea.

This is what happens when I get angry with a spammer

2005-05-10 Thread jdow
===8<--- header JD_USATODAY_1From =~ /e\.usatoday\.com/i describe JD_USATODAY_1 usatoday.com - SAY WHAT? score JD_USATODAY_1 300 body JD_USATODAY_2 /e\.usatoday\.com/i describe JD_USATODAY_2 I never joined dummies score JD_USATODAY_2 300 ===8<--- Somebody at that "media" place

Re: Weighing spam with sa-learn

2005-05-10 Thread jdow
From: "Craig McLean" <[EMAIL PROTECTED]> > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Johnson, S wrote: > > > > > > I'm looking at creating an email address to capture spam and only be > > used for spam. Since I can be guaranteed that all email I received to > > this address is spam, is

Re: This is what happens when I get angry with a spammer

2005-05-10 Thread Steve Prior
jdow wrote: ===8<--- header JD_USATODAY_1From =~ /e\.usatoday\.com/i describe JD_USATODAY_1 usatoday.com - SAY WHAT? score JD_USATODAY_1 300 body JD_USATODAY_2 /e\.usatoday\.com/i describe JD_USATODAY_2 I never joined dummies score JD_USATODAY_2 300 ===8<--- Somebody at that "med

Re: This is what happens when I get angry with a spammer

2005-05-10 Thread jdow
From: "Steve Prior" <[EMAIL PROTECTED]> > jdow wrote: > > > ===8<--- > > header JD_USATODAY_1From =~ /e\.usatoday\.com/i > > describe JD_USATODAY_1 usatoday.com - SAY WHAT? > > score JD_USATODAY_1 300 > > > > body JD_USATODAY_2 /e\.usatoday\.com/i > > describe JD_USATODAY_2 I never

problems with bayes

2005-05-10 Thread Bill Omer
Hello list I am having an issue with bayes. I'm using MailScanner which invokes Mail:SpamAssassin (a mix of 3.0.3 and 3.0.2). This is being ran off an LVS cluster consisting of 3 real servers. I have been able to get bayes to use MySQL so all the nodes can share the same bayes db. This has bee

Re: Weighing spam with sa-learn

2005-05-10 Thread Craig McLean
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 jdow wrote: | From: "Craig McLean" <[EMAIL PROTECTED]> | |>-BEGIN PGP SIGNED MESSAGE- |>Hash: SHA1 |> |>Johnson, S wrote: |> |>> |>>I'm looking at creating an email address to capture spam and only be |>>used for spam. Since I can be guaranteed

RE: how to config SA to scan mail from localhost

2005-05-10 Thread Bowie Bailey
From: forum [mailto:[EMAIL PROTECTED] > > Yes, you're right. > I have just solved my first problem. Now, I can send e-mails via php and > they are scanned by SA. My solution is using another computer to send > e-mails across private lan. > > I'm trying to solve the second problem. It is how to se

Re: Brandy spanky new drug spam trick

2005-05-10 Thread Matt Kettler
jdow wrote: >Odd, I typed that correctly in the user_prefs and transcribed it >wrong here. >header JD_FROM_DRUG_1 From =~ /(viagra|cialis| soma)\b/i > JD - performance suggestion. When doing a (a|b) type construct, add ?: to disable backreferences. It saves some memory and speeds the regex execu

Re: Which part of code that SA use to compute Bayes score

2005-05-10 Thread Matt Kettler
forum wrote: > I can found only Bayes.pm and method tokenize that is used when > learning an e-mail. > I want to know which file that is used to compute Bayes score for > incomming mail > > Thanks > Heng 1) why do you care? 2) look further into bayes.pm at sub compute_prob_for_token and sub sc

Re: *****SPAM***** SpamAssassin 3.0.2 flags messages from users@spamassassin.apache.org

2005-05-10 Thread Martin G. Diehl
Martin G. Diehl wrote: Thanks to everyone who responded ... you helped me think it through. Greetings, I am seeing some SpamAssassin eMail messages flagged as SPAM. That's probably not unusual, given the nature of our discussions and especially because we quote actual SPAM examples within our messa

Re: Difference in scores between spamc and spamassassin [RESOLVED]

2005-05-10 Thread Matt Kettler
Nick Gilbert wrote: >>>Surely they should both give exactly the same result? >>> >>> >>Maybe.. Depends a LOT on the options you pass to spamd when you start it. >> >> > >Yes you're right - there's an error in the scripts on Bill Shupps >shupp.org site which I used to make my box - it was

Re: SpamAssassin 3.0.2 flags messages from users@spamassassin.apache.org

2005-05-10 Thread Martin G. Diehl
Thomas Cameron wrote: so I whitelist on: List-Id: Do you mind posting the exact syntax in your local.cf to do this? All that I was able to find out is that it locally coding and is part of the user login. Thanks! Thomas -- Martin G. Diehl

Re: This is what happens when I get angry with a spammer

2005-05-10 Thread Steve Prior
jdow wrote: Kindly explain to me how I can perform that nice bounce trick when I am using fetchmail, Steve. I'd LOVE to do that. Unfortunatly you can't. You only have one shot to reject the email from the spammer and that is when the spammers machine is connecting to yours to deliver the message.

Re: SpamAssassin don't see my body instruction ?

2005-05-10 Thread Matt Kettler
Phibee Network operation Center wrote: > Hi > > i use SpamAssassin 3.0.1 on a qmail/qmail-scanner 1.25st. > i have my list into personnal.cf > > my problems that is SpamAssassin see my instruction: > > header PERSO_SUJET_18 Subject =~ /New! Vìagra soft/i > score PERSO_SUJET_18 3

[Fwd: Re: SpamAssassin 3.0.2 flags messages from users@spamassassin.apache.org]

2005-05-10 Thread Martin G. Diehl
Sorry if you see a double post ... it was my bad to forget to remove the ** spam ** flags in the subject. Original Message Subject: Re: *SPAM* SpamAssassin 3.0.2 flags messages from users@spamassassin.apache.org Date: Tue, 10 May 2005 16:58:00 -0400 From: Martin G. Diehl

[Fwd: Re: SpamAssassin 3.0.2 flags messages from users@spamassassin.apache.org]

2005-05-10 Thread Martin G. Diehl
Sorry if you see a double post ... it was my bad to forget to remove the ** spam ** flags in the subject. Original Message Subject: Re: SpamAssassin 3.0.2 flags messages from users@spamassassin.apache.org Date: Tue, 10 May 2005 16:58:00 -0400 From: Martin G. Diehl <[EMAIL PROTE

Showing score in outlook column

2005-05-10 Thread Chris Hale
I think I've exhausted my search on Google and the archives for this list. I have an ISP that does SpamAssassin for my email, which then I download via POP3. I use Outlook 2000, which I know can filter the emails too other folders, etc, based on the SA headers. What I would like to be able too d

RE: Showing score in outlook column

2005-05-10 Thread Matthew.van.Eerde
Chris Hale wrote: > I use Outlook 2000, which I know can filter the emails too other > folders, etc, based on the SA headers. > > What I would like to be able too do, is see the score in it's own > separate column (preferable that could be sorted by). You could use Outlook's "Categories" feature.

Re: [Razor-users] Small Problem with Razor2 via SpamAssassin

2005-05-10 Thread Theo Van Dinter
On Tue, May 10, 2005 at 06:13:36PM -0500, Daniel J McDonald wrote: > > I'm using SpamAssassin 3.0.2 with Razor2 (agent 2.61). > > Not 2.67? So no whiplash (version 8) signatures... very odd... Whiplash was added in 2.61, fyi. -- Randomly Generated Tagline: "Nothing takes the taste out of pean

Re: This is what happens when I get angry with a spammer

2005-05-10 Thread jdow
From: "Steve Prior" <[EMAIL PROTECTED]> > jdow wrote: > > > > > Kindly explain to me how I can perform that nice bounce trick when I am > > using fetchmail, Steve. I'd LOVE to do that. > > Unfortunatly you can't. You only have one shot to reject the email from > the spammer and that is when the s

Re: how to config SA to scan mail from localhost

2005-05-10 Thread Evan Platt
At 09:28 PM 5/9/2005, you wrote: At 09:16 PM 5/9/2005, you wrote: I'm testing the SA but my server can't connect to outside world. Thus, i've to send mail from localhost to myself to find how accurate SA is. Unfortunately, SA don't scan mails that sent from localhost. how can I reconfig it to sca

Re: Showing score in outlook column

2005-05-10 Thread Martin G. Diehl
Chris Hale wrote: > I think I've exhausted my search on Google and the archives for this list. I have an ISP that does SpamAssassin for my email, which then I download via POP3. I use Outlook 2000, which I know can filter the emails too other folders, etc, based on the SA headers. What I would like

Re: Showing score in outlook column

2005-05-10 Thread Tom Emerson
Chris Hale wrote: I think I've exhausted my search on Google and the archives for this list. I have an ISP that does SpamAssassin for my email, which then I download via POP3. Can you control your own userprefs file on the ISP? If so, add the score as part of the "subject rewrite" rule [or whatev

Re: how to config SA to scan mail from localhost

2005-05-10 Thread Loren Wilton
> I'm trying to solve the second problem. It is how to send an e-mail with a > fake header that is as like as header of real mail. > Can you help me to solve this problem. Is there any program that can send an > e-mail with header that i can chose. IS there any reason you absolutely have to use a

Re: Showing score in outlook column

2005-05-10 Thread Loren Wilton
> I use Outlook 2000, which I know can filter the emails too other folders, > etc, based on the SA headers. > > What I would like to be able too do, is see the score in it's own separate > column (preferable that could be sorted by). > > Does anybody have a COM add-in or VBScript to do this? If yo

Re: Showing score in outlook column

2005-05-10 Thread Loren Wilton
> Knowing the SPAMassassin score might not help ... why do you expect to find any > correlation bwetween score and either false positives and false negativews? > > I have some messages from the SPAMassassin lists that got analyzed > (somehow, my whitelist settings got ignored sometimes) -- and of t