Re: user_prefs not used

2006-11-25 Thread Chris Willard
Hi Wes! On Wed, 22 Nov 2006, twofers wrote: > Have you run spamassassin -D --lint? to check for syntax, etc. errors? I did not run it with the debug option. When I did this a found a few problems including one with my firewall! Thank's for your help. I should be able to work out the rest. Rega

Re: Percentage of email that is spam after filtering?

2006-11-25 Thread Nigel Frankcom
On Fri, 24 Nov 2006 23:51:23 -0600, Bookworm <[EMAIL PROTECTED]> wrote: >Marc Perkel wrote: >> >> >> Kelly Jones wrote: >>> I know that most (90%+) email sent now is spam, but what are the >>> numbers for people who use spam filtering? >>> >>> I realize it varies by user, sensitivity to false posi

too high score from DNSBL

2006-11-25 Thread vertito
loadplugin Mail::SpamAssassin::Plugin::URIDNSBL i am using the above plugins, and noticed that a normal email from yahoo shows X-Spam-Status: No, score=3.0 required=5.0 tests=DNS_FROM_RFC_ABUSE, DNS_FROM_RFC_POST,DNS_FROM_RFC_WHOIS,HTML_MESSAGE autolearn=no version=3.1.7 which catc

Re: Who wants my spam - seriously!

2006-11-25 Thread Craig Morrison
Marc Perkel wrote: As you all know I'm in the spam blocking business and looking to share my information with others to help them block spam for everyone. I'm currently feeding my spam to several people now. You asked Feedback welcome. Given the rants on your website and just your

Re: Percentage of email that is spam after filtering?

2006-11-25 Thread John Tice
I am always amazed to hear how much gets through on corporate systems. My wife works in a corporate office with a dedicated IT department and she says 60-70% of their total received is spam. I would think that number to be intolerable. For instance, I have a VPS and host about a dozen sit

RE: too high score from DNSBL

2006-11-25 Thread Michael Scheidell
see FAQ about changing scores, and if yahoo is sponsoring spammers web sites, maybe they should be marked as spam? if spamcop also lists yahoo.com server as spam origin, it means MANY people have manually visited spamcop web site and confirmed spam messages form them. (what is one man's spam is a

RE: Percentage of email that is spam after filtering?

2006-11-25 Thread Randal, Phil
Oh, this is a difficult one to measure. As an admin, I cannot judge whether some emails are what I call "subscriber spam" (special offers mailing lists) or unsolicited. Neither has a legitimate place in this organization, so I'm not too bothered, but it does mean that my figures cannot be precise.

Re: Percentage of email that is spam after filtering?

2006-11-25 Thread Loren Wilton
I'd like something quasi-official if possible, so I can tell my bosses: according to this report, even with diligent spam filtering, xx% of the email people receive is still spam. If fewer than xx% of your email is spam, we're ahead of the curve. I only filter mail for myself, and I'm aggressive

Spamcop reporting? Anon or register?

2006-11-25 Thread Michael Scheidell
According to SA documentation, not registering with spamcop will lessen the 'weight' of your report to spamcop when you use the manual report spam features of spamcop. spamcop_to_address [EMAIL PROTECTED] (default: generic reporting address) Your customized SpamCop report submission address. Y

Re: Allow User Rules

2006-11-25 Thread Matt Kettler
Chuck Payne wrote: > I am curretly using 3.1.3 and I am having a problem with the > allow_user_rules. I have it as the line in my local.cf. and my users > have .spamassassin in their home dir. Each has it own user_prefs with > their required_score, but my system required_score is over riding them.

Re: too high score from DNSBL

2006-11-25 Thread Matt Kettler
vertito wrote: > loadplugin Mail::SpamAssassin::Plugin::URIDNSBL > > i am using the above plugins, and noticed that a normal email from > yahoo shows > > *X-Spam-Status:* No, score=3.0 required=5.0 tests=DNS_FROM_RFC_ABUSE, > DNS_FROM_RFC_POST,DNS_FROM_RFC_WHOIS,HTML_MESSAGE autolearn=no >

Re: Spamcop reporting? Anon or register?

2006-11-25 Thread Andrzej Adam Filip
"Michael Scheidell" <[EMAIL PROTECTED]> writes: > According to SA documentation, not registering with spamcop will lessen > the 'weight' of your report to spamcop when you use the manual report > spam features of spamcop. > > spamcop_to_address [EMAIL PROTECTED] (default: generic reporting address

Re: backscatter from a joejob is killing me

2006-11-25 Thread Chris
On Thursday 23 November 2006 4:26 am, Justin Mason wrote: > There's also a SpamAssassin ruleset -- > http://wiki.apache.org/spamassassin/VBounceRuleset . > > --j. I've installed the VBounce Ruleset and it tags bounce messages correctly, however, I'm pretty much lost when it comes to writing other

Re: postgres database

2006-11-25 Thread Chris Purves
Tom Allison wrote: To set up SQL for Bayes look at: /usr/share/doc/spamassassin/sql or http://wiki.apache.org/spamassassin/BetterDocumentation/SqlReadmeBayes To set site-wide bayes with sql, either: 1. Always call spamc or spamassassin with the same user 2. set 'bayes_sql_override_username'

RE: Spamcop reporting? Anon or register?

2006-11-25 Thread Michael Scheidell
> -Original Message- > From: Andrzej Adam Filip [mailto:[EMAIL PROTECTED] > Sent: Saturday, November 25, 2006 10:13 AM > To: users@spamassassin.apache.org > Subject: Re: Spamcop reporting? Anon or register? > You may use spamcup or > http://anfi.homeunix.net/perl/spamcop-ack.pl to auto

Re: backscatter from a joejob is killing me

2006-11-25 Thread Bob Mortimer
On Saturday 25 November 2006 15:26, Chris wrote: > I've installed the VBounce Ruleset and it tags bounce messages correctly, > however, I'm pretty much lost when it comes to writing other than a simple > procmail recipe. So if someone could lend a hand I'd be very much > > appreciative. What I h

Re: backscatter from a joejob is killing me

2006-11-25 Thread Chris
On Saturday 25 November 2006 9:46 am, Bob Mortimer wrote: > On Saturday 25 November 2006 15:26, Chris wrote: > > I've installed the VBounce Ruleset and it tags bounce messages > > correctly, however, I'm pretty much lost when it comes to writing other > > than a simple procmail recipe. So if someo

Re: Spamcop reporting? Anon or register?

2006-11-25 Thread Andrzej Adam Filip
"Michael Scheidell" <[EMAIL PROTECTED]> writes: > Andrzej Adam Filip writes: >> [...] >> You may use spamcup or >> http://anfi.homeunix.net/perl/spamcop-ack.pl to automatically >> acknowledge spamcop.net reports submitted by >> "spamassassin -r" via SMTP. > > This is a bad idea. > 75% of the lin

Email Probs

2006-11-25 Thread rtartar
I have some type of email mining where they send to a dictionary of names and combos to [EMAIL PROTECTED] What is the best way to combat this? Thanks Sent via the WebMail system at symbiostech.com

Re: Email Probs

2006-11-25 Thread JamesDR
rtartar wrote: I have some type of email mining where they send to a dictionary of names and combos to [EMAIL PROTECTED] What is the best way to combat this? Thanks Don't accept mail for invalid users. -- Thanks, JamesDR smime.p7s Description: S/MIME Cryptographic Signature

Re: Email Probs

2006-11-25 Thread Nigel Frankcom
On Sat, 25 Nov 2006 12:00:55 -0500, "rtartar" <[EMAIL PROTECTED]> wrote: >I have some type of email mining where they send to a dictionary of names and >combos to [EMAIL PROTECTED] What is the best way to combat this? > > > >Thanks > Don't allow catchall accounts on your servers. They are far

Re: Percentage of email that is spam after filtering?

2006-11-25 Thread Kelly Jones
Thanks to everyone who is replying here. Additional replies/comments always appreciated. What started me thinking about this is this non-intuitive but mathematically valid "paradox" that Bookworm and others have noticed: If 95% of all email is spam, and I correctly tell users that I block 95% of

RE: Percentage of email that is spam after filtering?

2006-11-25 Thread Giampaolo Tomassoni
From: Kelly Jones [mailto:[EMAIL PROTECTED] > Thanks to everyone who is replying here. Additional replies/comments > always appreciated. > > What started me thinking about this is this non-intuitive but > mathematically valid "paradox" that Bookworm and others have noticed: > > If 95% of all emai

Re: Percentage of email that is spam after filtering?

2006-11-25 Thread Nigel Frankcom
On Sat, 25 Nov 2006 10:59:52 -0700, "Kelly Jones" <[EMAIL PROTECTED]> wrote: >Thanks to everyone who is replying here. Additional replies/comments >always appreciated. > >What started me thinking about this is this non-intuitive but >mathematically valid "paradox" that Bookworm and others have not

Re: Bayes - Autoexpiry, bayes_seen, and bayes_tok

2006-11-25 Thread Jason Frisvold
On 11/24/06, Matt Kettler <[EMAIL PROTECTED]> wrote: It's not "fixed", it's only hack-fixed. There is no real expiry of bayes_seen, nor the AWL, in SA 3.1.x. It's now safe to delete bayes_seen, you won't corrupt your whole bayes DB if you do that. That's the only fix I know of that's been applie

Re: Bayes - Autoexpiry, bayes_seen, and bayes_tok

2006-11-25 Thread Theo Van Dinter
On Sat, Nov 25, 2006 at 01:41:50PM -0500, Jason Frisvold wrote: > With respect to bayes_tok though, can that be trimmed at all with > minimal impact? 3GB is a tad large for the database, though I guess > that depends on the number of users. I can't think of any way to > limit that, though, and I

Re: Bayes - Autoexpiry, bayes_seen, and bayes_tok

2006-11-25 Thread Nigel Frankcom
On Sat, 25 Nov 2006 13:55:37 -0500, Theo Van Dinter <[EMAIL PROTECTED]> wrote: >On Sat, Nov 25, 2006 at 01:41:50PM -0500, Jason Frisvold wrote: >> With respect to bayes_tok though, can that be trimmed at all with >> minimal impact? 3GB is a tad large for the database, though I guess >> that depen

spamd crashing...

2006-11-25 Thread Jeff Funk
My spamd process is crashing a lot. Sometimes several times an hour. I've got a monitor that restarts it but I'd really like to figure out the cause and fix it. Any clues as to where I would look to begin?? J.

Re: Percentage of email that is spam after filtering?

2006-11-25 Thread Bookworm
John Tice wrote: I am always amazed to hear how much gets through on corporate systems. My wife works in a corporate office with a dedicated IT department and she says 60-70% of their total received is spam. I would think that number to be intolerable. For instance, I have a VPS and host abou

Re: Who wants my spam - seriously!

2006-11-25 Thread Benny Pedersen
On Fri, November 24, 2006 22:19, Marc Perkel wrote: > As you all know I'm in the spam blocking business and looking to share > my information with others to help them block spam for everyone. I'm > currently feeding my spam to several people now. [snip] can you run pyzord ? extend fuzzyocr to ma

CNHC - stock spam

2006-11-25 Thread Rajkumar S
Hi, I am using the latest SARE stocks rules, and my spamassassin catches most of the stock spam, but today I received a couple of spam peddling stocks of CNHC. This spam is so perfect that it's getting negative scores and not matchign any of the SARE rules. Any one with same experience? raj

Re: too high score from DNSBL

2006-11-25 Thread Jan Doberstein
hiya, vertito schrieb: > which catches my attention. Yes, it is not spam, but a score of 3.0 from > DNSBL is a little > bit high for me. anybody can advise how can i lower them down? just change scoring ... best is in your local.cf or a new .cf that you name scoring.cf (for example). there you

Re: Email Probs

2006-11-25 Thread Ronnie Tartar
I have it setup to be a gateway for a imail mail server. - Original Message - From: "JamesDR" <[EMAIL PROTECTED]> To: Sent: Saturday, November 25, 2006 12:02 PM Subject: Re: Email Probs rtartar wrote: I have some type of email mining where they send to a dictionary of names and com

Re: RelayChecker 0.3

2006-11-25 Thread Nix
On 17 Nov 2006, Michael Alan Dorman outgrape: > I lowered the score from 6 to 4.5, though, and it's continued to be > effective, while letting those emails through. 6 is an insane score for *any* rule, IMNSHO. -- `The main high-level difference between Emacs and (say) UNIX, Windows, or BeOS...

Not sure what to do about this...

2006-11-25 Thread Craig Zeigler
it seems over the past couple of weeks, I'm getting 50-80 of these per day into my inbox. From what I can tell, it isn't hitting the bayes filters when other messages do. Anyone have any idea? I have sorted these and trained the bayes filters, but if it isn't hitting them I don't know what mo

Re: would SA benefit from port to Java

2006-11-25 Thread Nix
On 20 Nov 2006, Giampaolo Tomassoni spake thusly: >> That's not even mentioning the metaprogramming and higher-order >> programming techniques that we use extensively in SpamAssassin -- those >> are basically *just not possible* in C/C++. ;) > > Ops. What's this stuff? Let me know. eval and all t

Re: would SA benefit from port to Java

2006-11-25 Thread jdow
From: "Nix" <[EMAIL PROTECTED]> On 20 Nov 2006, Giampaolo Tomassoni spake thusly: That's not even mentioning the metaprogramming and higher-order programming techniques that we use extensively in SpamAssassin -- those are basically *just not possible* in C/C++. ;) Ops. What's this stuff? Let

Re: Bayes - Autoexpiry, bayes_seen, and bayes_tok

2006-11-25 Thread Matt Kettler
Jason Frisvold wrote: > > With respect to bayes_tok though, can that be trimmed at all with > minimal impact? 3GB is a tad large for the database, though I guess > that depends on the number of users. I can't think of any way to > limit that, though, and I wonder how even larger entities can deal

Re: Not sure what to do about this...

2006-11-25 Thread John Andersen
On Saturday 25 November 2006 14:09, Craig Zeigler wrote: > I have sorted > these and trained the bayes filters, but if it isn't hitting them I > don't know what more to do. > RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E4_51_100, > RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK autolearn=no version=3.1.3-g

Re: would SA benefit from port to Java

2006-11-25 Thread Tom Allison
Nix wrote: On 20 Nov 2006, Giampaolo Tomassoni spake thusly: That's not even mentioning the metaprogramming and higher-order programming techniques that we use extensively in SpamAssassin -- those are basically *just not possible* in C/C++. ;) Ops. What's this stuff? Let me know. eval and al

Re: CNHC - stock spam

2006-11-25 Thread Loren Wilton
I seem to have exactly one for that stock today. It had so much obfuscation that I missed it was a stock spam. However, one SARE rule hit, and one of Theo's hit, along with the usual collection of network tests. Loren

RE: Greylisting

2006-11-25 Thread mail
Very interesting - and scary to be honest :( I'm guessing most greylisting software out there also operates with a set expire for each record? This being pretty high - obviously... 1-30 days or what is reasonable. - Nicolai -Original Message- From: Bob Proulx [mailto:[EMAIL PROTECTED]

Re: Not sure what to do about this...

2006-11-25 Thread jdow
From: "John Andersen" <[EMAIL PROTECTED]> Raise the score of RAZOR2_CF_RANGE_E4_51_100 and RAZOR2_CF_RANGE_E8_51_100 significantly. Like maybe 3.0 for each. IMHO, anything that hits both of those is spam. meta RAZOR2_E8_AND_E4 RAZOR2_CF_RANGE_E4_51_100 && RAZOR2_CF_RANGE_E8_51_100 score RAZ

Re: Greylisting

2006-11-25 Thread Bob Proulx
[EMAIL PROTECTED] wrote: > Very interesting - and scary to be honest :( Scary? Why? > I'm guessing most greylisting software out there also operates with a set > expire for each record? This being pretty high - obviously... 1-30 days or > what is reasonable. I use the 'postgrey' package which i

RE: Email Probs

2006-11-25 Thread mail
Use LDAP or the like for a centralized user database if your MTA supports mail routing via this. - Nicolai -Original Message- From: Ronnie Tartar [mailto:[EMAIL PROTECTED] Sent: 25. november 2006 22:19 To: users@spamassassin.apache.org Subject: Re: Email Probs I have it setup to be a