RE: Config files

2006-03-03 Thread James Smith
> Ah, Debian. :/ Not a big fan myself, but thought I would give Ubuntu a try... > The other place SA configuration files will show up is in > ~/.spamassassin. These are per-user files, and set up > *slightly* differently than the main files. There is one file > (~/.spamassassin/user_prefs) t

Re: [sa-list] Re: Spamd keeps getting hung up!

2006-03-03 Thread Justin Mason
Dan Mahoney, System Admin writes: > And 4) This whenever it gets hung up (those __alarm__ things couldn't be > more vague, could they?): > > Mar 2 12:53:07 quark spamd[94770]: __alarm__ > Mar 2 12:53:07 quark spamd[94770]: __alarm__ that's with the bug 4696 patches applied? they should not b

OT: Fail to install DNS module

2006-03-03 Thread Awie
All, My apologize for this OT. I want to install Net/DNS.pm and other component to be able to run sa-update. For easier install, I run command perl -e 'use CPAN; install Net::DNS'. However, I got message (below), explain it is fail. Would you explain me how I can install it? Your answer is very

Tricky University spam

2006-03-03 Thread James Lay
Hey all! So I can't seem to stop this spam. All it is are a bunch of random words then a gif file. Below is an example of the words: cocky may spice a drove not omit it silas or allegheny not arcadia try obstinacy it heft but essay may lamb and dignify a nudge and vine or anna ! jiffy but rob

Re: SA-LEARN HANGING when database over 2000 SPAM messages

2006-03-03 Thread Marc Dufresne
I temporarily fixed the issue be replacing the bayes_toks file from the original starterDB. Luckily, I moved daily copies of my spam account to an archived location. It didn't take me long to feed SA. It seems the Berkley format is easily corrupted. I will have to get this ported over to SQL. Tha

Re: [sa-list] Re: Spamd keeps getting hung up!

2006-03-03 Thread Dan Mahoney, System Admin
On Fri, 3 Mar 2006, Justin Mason wrote: Dan Mahoney, System Admin writes: And 4) This whenever it gets hung up (those __alarm__ things couldn't be more vague, could they?): Mar 2 12:53:07 quark spamd[94770]: __alarm__ Mar 2 12:53:07 quark spamd[94770]: __alarm__ that's with the bug 4696 pa

RE: Fail to install DNS module

2006-03-03 Thread Bowie Bailey
Awie wrote: > > I want to install Net/DNS.pm and other component to be able to run > sa-update. > > For easier install, I run command perl -e 'use CPAN; install > Net::DNS'. However, I got message (below), explain it is fail. > > Would you explain me how I can install it? Your answer is very > a

RE: Config files

2006-03-03 Thread Bowie Bailey
James Smith wrote: > > > The default value for required_score is 5.0, so I'm wondering > > where the 4.0 comes from in the first place. How are you running > > SA? > > I was wondering that myself, last time I used SA it was on a fully > self configured system, this time it is Ubuntu (Debian der

Particular type of Spam getting through

2006-03-03 Thread Ed Russell
Hello again all, for the most part all the changes and updates to my SA configuration have been working absolutely fantastic; however a particular type of spam is getting past SA. The subjects are usually an offshoot of: American Idol Viewer #330a Starbucks Member #209127552 Ebay Customer #29-814

RE: Config files

2006-03-03 Thread James Smith
> Make a rule that hits everything with a low score. Something like > this: > > Header TEST_E ALL =~ /e/ > Describe TEST_E Found an E in the header > Score TEST_E 0.01 > > This will fire on every email, but with a low score, it shouldn't > affect spam detection. Ok, I inserted thos

Question About whitelist_from_rcvd

2006-03-03 Thread Gustafson, Tim
In my local.cf, I have the following: whitelist_from_rcvd [EMAIL PROTECTED] mail.someplace.com However, when messages arrive at my server from mydomain.com through mail.someplace.com, they are still being tagged as SPAM: sm-mta: k23G6r86071146: from=<[EMAIL PROTECTED]>, size=38180, class=0, nrcp

RE: Tricky University spam

2006-03-03 Thread Chris Santerre
Title: RE: Tricky University spam > > Hey all! > > So I can't seem to stop this spam.  All it is are a bunch of random > words then a gif file.  Below is an example of the words: > > cocky may spice a drove not omit it silas or allegheny not > arcadia try obstinacy it heft but essay may la

Re: Particular type of Spam getting through

2006-03-03 Thread Stuart Johnston
It is generally more useful to provide the entire message. Either attach it to a message or put it on the web. pastebin.com or similar can be helpful. Ed Russell wrote: Hello again all, for the most part all the changes and updates to my SA configuration have been working absolutely fantast

RE: Config files

2006-03-03 Thread Bowie Bailey
James Smith wrote: > > Make a rule that hits everything with a low score. Something like > > this: > > > > Header TEST_E ALL =~ /e/ > > Describe TEST_E Found an E in the header > > Score TEST_E 0.01 > > > > This will fire on every email, but with a low score, it > > shouldn't affect

RE: Config files

2006-03-03 Thread James Smith
> Please keep list traffic on the list. Yeah, sorry about that, I keep hitting reply without thinking but this mailing list doesn't fix the reply-to header like my others do. Appologies. > The only thing I can tell you is what I told you (at least I > think it was you) earlier. It was. > Run

RE: Config files

2006-03-03 Thread Bowie Bailey
James Smith wrote: > > > Run 'spamassassin -D --lint' and take a look at the output. It > > will list all of the config files that it uses in the debug > > output. > > It claims to be using the one I am modifying, it lies! Post the full output from that command so we can see what it is doing.

RE: Config files

2006-03-03 Thread James Smith
> > > Run 'spamassassin -D --lint' and take a look at the > output. It will > > > list all of the config files that it uses in the debug output. > > > > It claims to be using the one I am modifying, it lies! On running 'spamassassin -D --lint' it claims to use those config files, and does inde

RE: Config files

2006-03-03 Thread Matthew.van.Eerde
James Smith wrote: > On running 'spamassassin -D --lint' it claims to use those config > files, and does indeed (as shown by the TEST_E at the end of the > output) but it must be using diferent configs when invoked from the > mail server. My mail headers list tests not in this list, and only > req

OT Re: SpamAssassin tested by lwn.net

2006-03-03 Thread Kelson
jdow wrote: And of course, when reading BAYES_99 pronouncements one must ALWAYS be aware that YMMV in big glowing radioactive Cherenkov Radiation Blue letters is always presumed. Matt's note above proves it. Finally, a use for HTML in email! Though I'm not sure beta-particle-induced phosphores

Re: Tricky University spam

2006-03-03 Thread Ronan McGlue
Chris Santerre wrote: > > Hey all! > > So I can't seem to stop this spam. All it is are a bunch of random > words then a gif file. Below is an example of the words: > > cocky may spice a drove not omit it silas or allegheny not > arcadia try obstinacy it heft but essay may lamb and dign

Re: Multidomain Mailhosting on one physical host

2006-03-03 Thread Uwe Kiewel
""Daryl C. W. O'Shea"" <[EMAIL PROTECTED]> schrieb im Newsbeitrag news:<[EMAIL PROTECTED]>... > Kelson wrote: > > [EMAIL PROTECTED] wrote: > >> User Sam and Joe has internet access via DSL with a dynamic ip > >> address. The mail going from [EMAIL PROTECTED] to [EMAIL PROTECTED] is > >> identifie

Re: Tricky University spam

2006-03-03 Thread Barton L. Phillips
That is just sad. Ronan McGlue wrote: Chris Santerre wrote: > > Hey all! > > So I can't seem to stop this spam. All it is are a bunch of random > words then a gif file. Below is an example of the words: > > cocky may spice a drove not omit it silas or allegheny not > arcadia try obsti

Blah blah customer/viewer #123456789

2006-03-03 Thread Jon Drukman
SpamAssassin 3.1.0 on FreeBSD 4. It's working great for me 99% of the time, but there is one common type of spam that it lets through. I can't seem to train it to ignore it, and what's worse, it has begun hitting BAYES_00 and AWL so it's autolearning all these bad messages as ham! Argh! Th

RE: Config files

2006-03-03 Thread Matthew.van.Eerde
Matthew.van.Eerde wrote: > James Smith wrote: >> On running 'spamassassin -D --lint' it claims to use those config >> files, and does indeed (as shown by the TEST_E at the end of the >> output) but it must be using diferent configs when invoked from the >> mail server. My mail headers list tests n

Re: Tricky University spam

2006-03-03 Thread Gene Heskett
On Friday 03 March 2006 12:39, Ronan McGlue wrote: >Chris Santerre wrote: >> > Hey all! >> > >> > So I can't seem to stop this spam. All it is are a bunch of >> > random words then a gif file. Below is an example of the words: >> > >> > cocky may spice a drove not omit it silas or allegheny

RE: Config files

2006-03-03 Thread jeffd
This addresses one of my concerns. If there are multiple local.cf files, if children are spawned (correct term?) could they possible access the other files. Specifically, some of my ham, which is obviously spam seems to be comparing to another required_hits score. Obviously, this causes problem

RE: Config files

2006-03-03 Thread Bowie Bailey
[EMAIL PROTECTED] wrote: > This addresses one of my concerns. If there are multiple local.cf > files, if children are spawned (correct term?) could they possible > access the other files. Specifically, some of my ham, which is > obviously spam seems to be comparing to another required_hits score

Re: Any rule to flag missing message-id's as SPAM?

2006-03-03 Thread mouss
Philip Prindeville a écrit : > > I'm curious to know how the message could have been routed and delivered > without ever getting an Message-Id: stamped on it... > > Sendmail, for instance, will always add a message-id if one isn't present, > regardless of whether the message is being submitted lo

Re: Any rule to flag missing message-id's as SPAM?

2006-03-03 Thread Philip Prindeville
mouss wrote: >Philip Prindeville a écrit : > > >>I'm curious to know how the message could have been routed and delivered >>without ever getting an Message-Id: stamped on it... >> >>Sendmail, for instance, will always add a message-id if one isn't present, >>regardless of whether the message is

RE: Any rule to flag missing message-id's as SPAM?

2006-03-03 Thread Rosenbaum, Larry M.
> Hmmm Perhaps the protocol could had a mechanism added so that the > server could tell if it is talking to a peer (another MTA) or a client > (an MUA). There is such a mechanism in RFC-2476, but I don't know how many MUAs and MTAs support it.

Re: Any rule to flag missing message-id's as SPAM?

2006-03-03 Thread mouss
Philip Prindeville a écrit : > I see your point, however I don't think that Sendmail was trying to "fix" > broken email. I think it was trying to take email from other transports > and protocol spaces (like Bitnet, Usenet, Decnet, X.400, etc that have > passed into well deserved obscurity... ;-) a

Re: Any rule to flag missing message-id's as SPAM?

2006-03-03 Thread mouss
Rosenbaum, Larry M. a écrit : >>Hmmm Perhaps the protocol could had a mechanism added so that the >>server could tell if it is talking to a peer (another MTA) or a client >>(an MUA). > > > There is such a mechanism in RFC-2476, but I don't know how many MUAs > and MTAs support it. > all MT

Re: Blah blah customer/viewer #123456789

2006-03-03 Thread List Mail User
interambulacrums com - brand new domain, private registration. But the name servers at ns[12].ECBOLINE-com - Whois address checked at USPS ( http://zip4.usps.com/zip4/welcome.jsp ): " This address is NON-DELIVERABLE 225 N GUADALUPE ST STE 239 239 SANTA FE NM 87501

Apple iCards are being marked as spam

2006-03-03 Thread Benjamin Adams
Apple iCards are being marked as spam what can I do about it? A piece of the header: X-Spam-Status: Yes, hits=5.108 tagged_above=-999 required=5 tests=FORGED_YAHOO_RCVD, HTML_50_60, HTML_EXTRA_CLOSE, HTML_MESSAGE, MIME_HTML_ONLY, TW_DF X-Spam-Level: * http://www.mac.com/WebObjects/iCards.

Re: Apple iCards are being marked as spam

2006-03-03 Thread Theo Van Dinter
On Fri, Mar 03, 2006 at 05:08:33PM -0500, Benjamin Adams wrote: > Apple iCards are being marked as spam what can I do about it? > > A piece of the header: > X-Spam-Status: Yes, hits=5.108 tagged_above=-999 required=5 > tests=FORGED_YAHOO_RCVD, HTML_50_60, HTML_EXTRA_CLOSE, HTML_MESSAGE, > MIME_H

RE: Apple iCards are being marked as spam

2006-03-03 Thread Larry Rosenman
Theo Van Dinter wrote: > On Fri, Mar 03, 2006 at 05:08:33PM -0500, Benjamin Adams wrote: >> Apple iCards are being marked as spam what can I do about it? >> >> A piece of the header: >> X-Spam-Status: Yes, hits=5.108 tagged_above=-999 required=5 >> tests=FORGED_YAHOO_RCVD, HTML_50_60, HTML_EXTRA_

Re: Apple iCards are being marked as spam

2006-03-03 Thread Benjamin Adams
Its running on Mac OS X Server 10.4.5 On Mar 3, 2006, at 5:36 PM, Larry Rosenman wrote: Theo Van Dinter wrote: On Fri, Mar 03, 2006 at 05:08:33PM -0500, Benjamin Adams wrote: Apple iCards are being marked as spam what can I do about it? A piece of the header: X-Spam-Status: Yes, hits=5.108 t

Re: Config files

2006-03-03 Thread jdow
From: <[EMAIL PROTECTED]> James Smith wrote: On running 'spamassassin -D --lint' it claims to use those config files, and does indeed (as shown by the TEST_E at the end of the output) but it must be using diferent configs when invoked from the mail server. My mail headers list tests not in this

Re: OT Re: SpamAssassin tested by lwn.net

2006-03-03 Thread jdow
From: "Kelson" <[EMAIL PROTECTED]> jdow wrote: And of course, when reading BAYES_99 pronouncements one must ALWAYS be aware that YMMV in big glowing radioactive Cherenkov Radiation Blue letters is always presumed. Matt's note above proves it. Finally, a use for HTML in email! Though I'm not

Re: Any rule to flag missing message-id's as SPAM?

2006-03-03 Thread David B Funk
On Fri, 3 Mar 2006, Philip Prindeville wrote: > mouss wrote: > > >Philip Prindeville a écrit : > > > > > >>I'm curious to know how the message could have been routed and delivered > >>without ever getting an Message-Id: stamped on it... > >> > >>Sendmail, for instance, will always add a message-id

auto_learn

2006-03-03 Thread jeffd
Hello, I am running SA 3.0.4 FC3 in both my local.cf and user_prefs bayes_auto_learn is set to 1. when I check my spam and ham folders all messages are auto_learn=no. does this mean that auto_learn is not active or that it simply did not learn in that instance. X-Spam-Flag: YES X-Spam-Checker-

Re: OT Re: SpamAssassin tested by lwn.net

2006-03-03 Thread Gene Heskett
On Friday 03 March 2006 17:56, jdow wrote: >From: "Kelson" <[EMAIL PROTECTED]> > >> jdow wrote: >>> And of course, when reading BAYES_99 pronouncements one must ALWAYS >>> be aware that YMMV in big glowing radioactive Cherenkov Radiation >>> Blue letters is always presumed. Matt's note above proves

Re: Question About whitelist_from_rcvd

2006-03-03 Thread mouss
Gustafson, Tim a écrit : > In my local.cf, I have the following: > > whitelist_from_rcvd [EMAIL PROTECTED] mail.someplace.com > > However, when messages arrive at my server from mydomain.com through > mail.someplace.com, they are still being tagged as SPAM: you didn't show the Received headers,

Re: auto_learn

2006-03-03 Thread Theo Van Dinter
On Fri, Mar 03, 2006 at 05:13:44PM -0600, [EMAIL PROTECTED] wrote: > when I check my spam and ham folders all messages are auto_learn=no. does > this > mean that auto_learn is not active or that it simply did not learn in that > instance. http://wiki.apache.org/spamassassin/AutolearningNotWorkin

Alarm Leaks (was: Re: [sa-list] Re: Spamd keeps getting hung up!)

2006-03-03 Thread Daryl C. W. O'Shea
Justin Mason wrote: Dan Mahoney, System Admin writes: And 4) This whenever it gets hung up (those __alarm__ things couldn't be more vague, could they?): Mar 2 12:53:07 quark spamd[94770]: __alarm__ Mar 2 12:53:07 quark spamd[94770]: __alarm__ that's with the bug 4696 patches applied? they

Re: OT Re: SpamAssassin tested by lwn.net

2006-03-03 Thread jdow
From: "Gene Heskett" <[EMAIL PROTECTED]> On Friday 03 March 2006 17:56, jdow wrote: From: "Kelson" <[EMAIL PROTECTED]> jdow wrote: And of course, when reading BAYES_99 pronouncements one must ALWAYS be aware that YMMV in big glowing radioactive Cherenkov Radiation Blue letters is always pres

Re: Particular type of Spam getting through

2006-03-03 Thread Loren Wilton
Some SARE rules might help. That looks like it might fail the ebay phish rules. Don't know that that in particular would help all of them, but that sort of thing might help some. Loren

Re: Config files

2006-03-03 Thread Loren Wilton
> > No sign of TEST_E and I made sure there was an e in the subject as > > well as the body and other headers so this config file clearly isn't > > being read properly. Any other ideas where else I could configure SA > > from? I forget, are you running spamd? You need to restart it for new rules