Re: Fedora changed SpamAssassin default level to 7?

2005-07-12 Thread jdow
From: "Justin Mason" <[EMAIL PROTECTED]> > fyi, if you're using Fedora Core -- > http://blog.dave.org.uk/archives/000715.html > > totally unconfirmed, but worth noting in case that really is the > case. I gave up on the FC4 SpamAssassin load very early on. It was totally Borked. I forced it out

Re: Fedora changed SpamAssassin default level to 7?

2005-07-12 Thread jdow
From: "Kelson" <[EMAIL PROTECTED]> > Justin Mason wrote: > > fyi, if you're using Fedora Core -- > > http://blog.dave.org.uk/archives/000715.html > > > > totally unconfirmed, but worth noting in case that really is the > > case. > > My copy of Fedora Core 4 has "required_hits 5" in local.cf usin

Re: Fedora changed SpamAssassin default level to 7?

2005-07-12 Thread Kenneth Porter
(Quoted in full for Warren, the Fedora contact.) --On Tuesday, July 12, 2005 12:06 AM -0700 jdow <[EMAIL PROTECTED]> wrote: Justin Mason wrote: > fyi, if you're using Fedora Core -- > http://blog.dave.org.uk/archives/000715.html > > totally unconfirmed, but worth noting in case that really is t

Re: Fedora changed SpamAssassin default level to 7?

2005-07-12 Thread Kenneth Porter
Reply from Warren: Kenneth, Thanks for alerting to me to this. I tried to post to the list, but it appears to be extremely slow or down at the moment or something. jdow wrote: Justin Mason wrote: fyi, if you're using Fedora Core -- http://blog.dave.org.uk/archives/000715.html totally unco

Re: Fedora changed SpamAssassin default level to 7?

2005-07-12 Thread Warren Togami
jdow wrote: Justin Mason wrote: fyi, if you're using Fedora Core -- http://blog.dave.org.uk/archives/000715.html totally unconfirmed, but worth noting in case that really is the case. We have never shipped spamassassin with a changed default level. I have absolutely no idea where this is

Re: Fedora changed SpamAssassin default level to 7?

2005-07-12 Thread jdow
From: "Kenneth Porter" <[EMAIL PROTECTED]> > (Quoted in full for Warren, the Fedora contact.) > > --On Tuesday, July 12, 2005 12:06 AM -0700 jdow <[EMAIL PROTECTED]> wrote: > > >> Justin Mason wrote: > >> > fyi, if you're using Fedora Core -- > >> > http://blog.dave.org.uk/archives/000715.html > >

Re: Fedora changed SpamAssassin default level to 7?

2005-07-12 Thread jdow
From: "Kenneth Porter" <[EMAIL PROTECTED]> > Reply from Warren: > > Kenneth, > Thanks for alerting to me to this. I tried to post to the list, but it > appears to be extremely slow or down at the moment or something. > > jdow wrote: > >> Justin Mason wrote: > >> > >>> fyi, if you're using Fedora

Re: rpm installation and dependencies

2005-07-12 Thread sasa
"Steve Sobol" wrote: > That's the way I'd do it. I'd much, MUCH rather install Perl modules via > CPAN than have to go resolve RPM dependencies. If there's an RPM available > that works with my distro, great! Otherwise... ..I have used YUM and the installation it's ok !! thanks. Salvat

Re: rpm installation and dependencies

2005-07-12 Thread jdow
From: "sasa" <[EMAIL PROTECTED]> > "Steve Sobol" wrote: > > > That's the way I'd do it. I'd much, MUCH rather install Perl modules via > > CPAN than have to go resolve RPM dependencies. If there's an RPM available > > that works with my distro, great! Otherwise... > > ..I have used YUM and the ins

RE: Bayesian filtering test

2005-07-12 Thread Mun Fai
Hi Bob > One possibility: If you're doing sa-learn as one user, and qmail is > invoking spamd to run as a different user, you may be training one > Bayes database and spamd may be using a different database that isn't > trained. > Bob Menschel I'm having some difficulty finding out exactly whic

Re: Fedora changed SpamAssassin default level to 7?

2005-07-12 Thread Kai Schaetzl
Jdow wrote on Tue, 12 Jul 2005 02:09:30 -0700: > I installed FC4 virgin. SpamAssassin 3.0.4 was installed. SPF checks did > not function. Other checks failed as well Well, could it be that it just doesn't enforce enough Perl dependencies? Installing from the tarball could have had the same bad

Re: Bayes Questions

2005-07-12 Thread Kai Schaetzl
Andrew Ott wrote on Mon, 11 Jul 2005 17:37:42 -0600: > Also is there any way to see the count of spam and ham messages that are in > the bayes database, I can't seem to find any info on that. I want to make > sure there are a lot in there before I turn the bayes rules on. sa-learn --dump magic

Excluding domains from "check_rbl_sub" checks

2005-07-12 Thread Rikhardur.EGILSSON
Is here an easy way to exclude domains from eval:check_rbl_sub checks ? It appears that hotmail.com hits DNS_FROM_RFC_ABUSE Because of "political reasons". (Or at least reasons I don´t completely agree with) See: http://www.rfc-ignorant.org/tools/lookup.php?domain=hotmail.com Is there any way t

RE: Bypass URI check

2005-07-12 Thread Martin.Carnegie
> -Original Message- > From: Daryl C. W. O'Shea [mailto:[EMAIL PROTECTED] > Sent: Monday, July 11, 2005 5:32 PM > To: Carnegie, Martin > Cc: users@spamassassin.apache.org > Subject: Re: Bypass URI check > > > [EMAIL PROTECTED] wrote: > > Hi All, > > > > I have received a few messages l

Distinguishing between mail that is "almost certainly" or "probably" spam

2005-07-12 Thread Richard Duran
Hello, I'm not sure if this belongs in the dev-list or not, but we have made some minor changes to SA in order for us to allow our users to create separate filters for mail that we consider to be "almost certainly" spam, versus mail that is "probably" spam. It should be noted that this code was o

Re: Distinguishing between mail that is "almost certainly" or "probably" spam

2005-07-12 Thread Jay Lee
Richard Duran wrote: Hello, I'm not sure if this belongs in the dev-list or not, but we have made some minor changes to SA in order for us to allow our users to create separate filters for mail that we consider to be "almost certainly" spam, versus mail that is "probably" spam. Just filter b

Re: Performance: files or SQL?

2005-07-12 Thread Cami
Michael Parker wrote: Cami wrote: SQL simply doesnt scale very well for bayes. We have a serverfarm of 12 spamassassin servers and storing bayes in SQL. We see on average about 4000 queries per second. The MySQL server has been optimized to hell and back and is running on high-end hardware,

Re: update on floating dividing score between spam and ham messages

2005-07-12 Thread Joe Flowers
Kai Schaetzl wrote: Joe Flowers wrote on Mon, 11 Jul 2005 12:09:29 -0400: That's bad, really bad detection ... No. It's good, really good detection. You should improve that instead of trying to find a barrier which gives you the best FP:FN ratio. I'm not trying to find the best F

Re: Performance: files or SQL?

2005-07-12 Thread Michael Parker
Cami wrote: > Well.. As for setup, we're using amavisd-new which provides more > functionality than spamc/spamd (thus producing more sql queries). > As for average scantime per msg, no idea since i dont log that. > Hardware wise: Dell PowerEdge 2650, Dual 3.06GHz, 6gigs of ram, > 5x32K RPM disks i

Re: Distinguishing between mail that is "almost certainly" or "probably" spam

2005-07-12 Thread Tim Litwiller
ay Lee wrote: Richard Duran wrote: Hello, I'm not sure if this belongs in the dev-list or not, but we have made some minor changes to SA in order for us to allow our users to create separate filters for mail that we consider to be "almost certainly" spam, versus mail that is "probably" spam

Re: Performance: files or SQL?

2005-07-12 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Parker writes: > Cami wrote: > > > Well.. As for setup, we're using amavisd-new which provides more > > functionality than spamc/spamd (thus producing more sql queries). > > As for average scantime per msg, no idea since i dont log that. > >

How to shut down

2005-07-12 Thread Michael
How to shut down the spamassassin? so it doesnt run ??

Re: Performance: files or SQL?

2005-07-12 Thread Michael Parker
Justin Mason wrote: > Is there any diff between Amavisd and spamd's use of SQL for bayes? > I wouldn't have thought so... No, just the fact that it doesn't generally support (someone feel free to correct me if I'm wrong) individualized configs (ie everything runs as a single user). Anyone who a

Re: Distinguishing between mail that is "almost certainly" or "probably" spam

2005-07-12 Thread Jay Lee
Tim Litwiller wrote: this is the way I've been doing it in procmail - then I don't have to count *'s # --- # Spamassassin - certainly spam # --- :0 H: * ^X-Spam-Status: +(yes|no), +score=\/[^. ]* * ? (( ${MA

RE: How to shut down

2005-07-12 Thread Chris Santerre
Unplug the power to the server.   If that fails, I assume you would need to contact the person that set it up. You sysadmin could allow all your email to come thru without being scanned.   I hope that helps,   Thinking of you,   Tom Cruise -Original Message-From: Michael [ma

Re: Fedora changed SpamAssassin default level to 7?

2005-07-12 Thread Kelson
jdow wrote: Bugzilla is basically worthless. So if I can get an arrogant remark about an annoyance with FC4 from one of the FC4 people responsible for that annoyance I figure I can be excused for being far more interested in making it work rather than filing bugzilla reports. (Searching Bugzilla

Re: Distinguishing between mail that is "almost certainly" or "probably" spam

2005-07-12 Thread Richard Duran
On 7/12/05, Jay Lee <[EMAIL PROTECTED]> wrote: > Just filter based on X-Spam-Level headers. If 8 is certainly spam then > have your server side filter or client filter look for 8 *s, then look > for 5 *s for probably spam. Very simple, no code changes needed. > > Jay Thanks for the response, J

Re: Performance: files or SQL?

2005-07-12 Thread Michael Parker
Mike Jackson wrote: > On my personal server, I'm running SA 3.0.4 with the user prefs, > Bayes, and AWL in a MySQL database (mostly because it would be > "cooler" that way). On my employer's server, I'm running the same SA > version, but with file-based DBs and user prefs. We're going to be > roll

RE: Bayes Questions

2005-07-12 Thread Herb Martin
> From: Kai Schaetzl [mailto:[EMAIL PROTECTED] > > Andrew Ott wrote on Mon, 11 Jul 2005 17:37:42 -0600: > > > Also is there any way to see the count of spam and ham > messages that > > are in the bayes database, I can't seem to find any info on > that. I > > want to make sure there are a lot

RE: How to shut down

2005-07-12 Thread Sander Holthaus - Orange XL
That might be a little overkill though it does the job ;-)   Stopping running things on *nix platforms is generally done by killing them, along with their children. "man kill" will teach you how. Programs that start when during boot usually have special scripts to both start and stop them, y

Re: Distinguishing between mail that is "almost certainly" or "probably" spam

2005-07-12 Thread Tim Litwiller
My users can find the "14" and change it easier than counting *'s and if I want to I can template the file and expand the correct score to each user easier with a number than with a bunch of *'s Jay Lee wrote: Tim Litwiller wrote: this is the way I've been doing it in procmail - then I don

RE: Distinguishing between mail that is "almost certainly" or "pr obably" spam

2005-07-12 Thread Kang, Joseph S.
> -Original Message- > From: Richard Duran [mailto:[EMAIL PROTECTED] > Sent: Tuesday, July 12, 2005 12:14 PM > To: [EMAIL PROTECTED] > Cc: users@spamassassin.apache.org > Subject: Re: Distinguishing between mail that is "almost > certainly" or "probably" spam > > > On 7/12/05, Jay Lee <

Re: update on floating dividing score between spam and ham messages

2005-07-12 Thread Kai Schaetzl
Joe Flowers wrote on Tue, 12 Jul 2005 11:55:36 -0400: > >That's bad, really bad > >detection ... > > > > > > No. It's good, really good detection. Sorry, I don't want to be rude by repeating myself, but if your average spam score is something like 6-something the *detection* *is* bad. M

Re: How to shut down

2005-07-12 Thread Steven Dickenson
On Jul 12, 2005, at 1:19 PM, Chris Santerre wrote: Thinking of you, Tom Cruise You owe me for the can of soda I just sprayed on my desk. Good times... -Original Message- From: Michael [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 12, 2005 12:48 PM To: users@spamassassin.apache.org

Re: How to shut down

2005-07-12 Thread Jay Lee
Steven Dickenson wrote: On Jul 12, 2005, at 1:19 PM, Chris Santerre wrote: Thinking of you, Tom Cruise You owe me for the can of soda I just sprayed on my desk. Good times... How to shut down the spamassassin? so it doesnt run ?? What operating system are you running SA on? How is i

Re: How to shut down

2005-07-12 Thread Steven Dickenson
On Jul 12, 2005, at 2:47 PM, Jay Lee wrote: I think you meant "Help me, help you!" You had me at hello... Wait, what list is this again? :) Steven --- Steven Dickenson <[EMAIL PROTECTED]> http://www.mrchuckles.net

Re: How to shut down

2005-07-12 Thread Dr Robert Young
Look at /etc/rc.d/init.d/spamassassin (at least on the Linux I am using ). /etc/rc.d/init.d/spamassassin start <- starts it up manually /etc/rc.d/init.d/spamassassin stop <-manually shuts it down /etc/rc.d/init.d/spamassassin restart <- cycles it ( off then on again) to pick up changes to config

Re: Fedora changed SpamAssassin default level to 7?

2005-07-12 Thread Ben Hanson
Pretty sure the FC4 issues with network services not functioning and such are simply due to the RPM not enforcing the Perl Dependencies. I presume it is packaged with the idea that the majority of end users will in fact be rolling out their machine as a desktop, and not want to be stuck with a

Re: How to shut down

2005-07-12 Thread Michael
The whole thing is that yesterday i did sa-learn spam with spam folder and today the server is runing very slowely now. Emails from to local users take about 3 hours to deliver. I`m runing RH 9.2 with postfix and spamassassin 3.0.4. I know i can kill processes but every time i try to kill sp

RE: How to shut down

2005-07-12 Thread Bret Miller
I'd run "sa-learn --force-expire" and see if that helps the speed a bit. From: Michael [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 12, 2005 12:24 PMTo: Sander Holthaus - Orange XLCc: users@spamassassin.apache.orgSubject: Re: How to shut down The whole thing is that yesterd

Re: How to shut down

2005-07-12 Thread Michael
since i have installed this system not long time ago. i did sa-learn --clear.Then i did sa-learn --sync - Original Message - From: Bret Miller To: users@spamassassin.apache.org Sent: Tuesday, July 12, 2005 3:44 PM Subject: RE: How to shut down I'd run "sa-l

Re: How to shut down

2005-07-12 Thread Michael
and eveyrthing is working fast like before. What is the best way to feed the bayes with spam considering that there is no mail kept at the server? All users download their mail and thats it. The spamassassin is marking spams over 5.0 but when it wants to  autolearn it says failed(I assume th

RE: How to shut down

2005-07-12 Thread Pierre Thomson
Michael,   For me, the quickest way to get Bayes going is with auto_learn.  (NOTE: you have to have your other rules working pretty well for this to be effective.)  I use:   bayes_auto_learn_threshold_nonspam   0.0bayes_auto_learn_threshold_spam   12.0bayes_auto_learn 

Re: How to shut down

2005-07-12 Thread Martin Schröder
RTFM

Re: How to shut down

2005-07-12 Thread jdow
Doctor? Database Consultant? Er, you should know better, Robert. {o.o} chkconfig spamassassin off Do not remove the file from init.d, ever. Nor is it "safe" generally speaking to remove the rcX.d/SMMspamassassin files. It's best to use the proper configuration tools. And - this particular advice

What is WOMR?

2005-07-12 Thread Martin.Carnegie
Title: What is WOMR? I have a FP that hit on SARE_SPEC_FROM_WOMR and the description is "Email from address points to WOMR".  I tried to find more information but the only thing I can find is a radio station in Cape Cod.  With a score of 4.0, this station must be bad :) Anyone have more infor

Re: How to shut down

2005-07-12 Thread jdow
service spamassassin stop Get the name right. It really helps. {^_^} - Original Message - From: "Michael" <[EMAIL PROTECTED]> The whole thing is that yesterday i did sa-learn spam with spam folder and today the server is runing very slowely now. Emails from to local users take about 3 h

RE: What is WOMR?

2005-07-12 Thread Pierre Thomson
Title: What is WOMR? That was originally "Word of Mouth Research".  Slippery operators who operate under MANY aliases.  "Share your experiences" etc... see: http://www.joewein.de/sw/spam-syex.htm   Pierre   -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]Sent:

Re: What is WOMR?

2005-07-12 Thread Andy Jezierski
<[EMAIL PROTECTED]> wrote on 07/12/2005 03:50:18 PM: > I have a FP that hit on SARE_SPEC_FROM_WOMR and the description is > "Email from address points to WOMR".  I tried to find more > information but the only thing I can find is a radio station in Cape > Cod.  With a score of 4.0, this station

RE: What is WOMR?

2005-07-12 Thread Martin.Carnegie
Title: Message Ah I see.  The subject of the message is "SHARE User Events in Boston: Early Registration Deadline July 15".  Would the best thing to do is whitelist these guys? --Martin Carnegie Systems ManagementATCO I-TekPhone: 780.420.5068Pager

RE: What is WOMR?

2005-07-12 Thread Andy Jezierski
<[EMAIL PROTECTED]> wrote on 07/12/2005 04:28:33 PM: > Ah I see.  The subject of the message is "SHARE User Events in > Boston: Early Registration Deadline July 15".  Would the best thing > to do is whitelist these guys? It's not the subject, it's who the message is from.   share.org Probably

Re: messages with no body

2005-07-12 Thread Eric A. Hall
On 7/10/2005 4:41 PM, Eric A. Hall wrote: > On 7/10/2005 3:49 PM, Loren Wilton wrote: > >>However, if you want something like this, just off the top of my head: >> >>header __HAS_TOTo =~/\S/ >>body__HAS_BODY/\S/ >>metaEMPTY_MSG(!__HAS_TO && !__HAS_BODY) > > Good idea. rawbody

Failed to run DNS_FROM_AHBL_RHSBL RBL SpamAssassin test

2005-07-12 Thread Jody Cleveland
Hello, I'm running Spamassassin 3.0.4 with MailScanner on a redhat 3.0 AS server. When I run: spamassassin -p /etc/MailScanner/spam.assassin.prefs.conf --lint I get this error: Failed to run DNS_FROM_AHBL_RHSBL RBL SpamAssassin test, skipping: (Can't call method "bgsend" on an undefined

Re[2]: Bayesian filtering test

2005-07-12 Thread Robert Menschel
Hello Mun, Tuesday, July 12, 2005, 3:36:10 AM, you wrote: >> One possibility: If you're doing sa-learn as one user, and qmail is >> invoking spamd to run as a different user, you may be training one >> Bayes database and spamd may be using a different database that isn't >> trained. MF> I'm havi

Re: Bayes Questions

2005-07-12 Thread Matt Kettler
Andrew Ott wrote: > For those of you running large sites ( we have about 12,000 users, with > 210,000 messages a day) what do you have for a bayes_expiry_max_db_size? Sorry, I'm not a large site, can't answer that. > Also is there any way to see the count of spam and ham messages that are in > t

Re: Fedora changed SpamAssassin default level to 7?

2005-07-12 Thread Warren Togami
Ben Hanson wrote: Pretty sure the FC4 issues with network services not functioning and such are simply due to the RPM not enforcing the Perl Dependencies. I presume it is packaged with the idea that the majority of end users will in fact be rolling out their machine as a desktop, and not want

Re: Fedora changed SpamAssassin default level to 7?

2005-07-12 Thread jdow
From: "Warren Togami" <[EMAIL PROTECTED]> > Ben Hanson wrote: > > Pretty sure the FC4 issues with network services not functioning and > > such are simply due to the RPM not enforcing the Perl Dependencies. I > > presume it is packaged with the idea that the majority of end users will > > in fact

Re: how to submit a spammer?

2005-07-12 Thread Jeff Chan
On Friday, July 8, 2005, 6:44:55 AM, Kris Deugau wrote: > jj-ml wrote: >> I've received once a day a spam from [EMAIL PROTECTED] >> (fidbroker.com) Since it is a french company and i live in france, i >> call them (the phone number is in the spam) and tell them to stop. >> They told me they will do