Re: what are the criteria for being listed in sa-blacklist.current?

2008-02-14 Thread Per Jessen
Matt Kettler wrote: >> For some reason one of my domains has all of a sudden been listed in >> the above listed db. Which is rather ironic since there are only 3 >> active accounts at this domain. 1 used for a couple of mailing lists, >> 1 - postmaster (inbound email only) and 1 domain contact add

Re: what are the criteria for being listed in sa-blacklist.current?

2008-02-14 Thread Jeff Chan
Quoting Per Jessen <[EMAIL PROTECTED]>: Matt Kettler wrote: For some reason one of my domains has all of a sudden been listed in the above listed db. Which is rather ironic since there are only 3 active accounts at this domain. 1 used for a couple of mailing lists, 1 - postmaster (inbound emai

Re: what are the criteria for being listed in sa-blacklist.current?

2008-02-14 Thread Jeff Chan
Also, the sa-blacklist inclusion policy is at: http://www.stearns.org/sa-blacklist/README.policy Jeff C.

Re: what are the criteria for being listed in sa-blacklist.current?

2008-02-14 Thread Per Jessen
Jeff Chan wrote: > Quoting Per Jessen <[EMAIL PROTECTED]>: >> I don't use it, but it could very easily be turned into an rbldnsd >> format list - I'm surprised nobody's done that yet. (assuming >> there's some actual use for the list). > > sa-blacklist is the basis of ws.surbl.org: > >http:

Re: what are the criteria for being listed in sa-blacklist.current?

2008-02-14 Thread mouss
Matt Kettler wrote: Dale's Stuff wrote: Hello, Trying to figure out what the criteria is for getting a domain listed in sa-blacklist.current, and more importantly how to be de-listed. List: AFAIK, you only need to be the From: address on spam sent to one of Will Stern's spamtrap. isn't this

Re: what are the criteria for being listed in sa-blacklist.current?

2008-02-14 Thread Matt Kettler
Jeff Chan wrote: Quoting Per Jessen <[EMAIL PROTECTED]>: Matt Kettler wrote: For some reason one of my domains has all of a sudden been listed in the above listed db. Which is rather ironic since there are only 3 active accounts at this domain. 1 used for a couple of mailing lists, 1 - postma

Re: what are the criteria for being listed in sa-blacklist.current?

2008-02-14 Thread Matt Kettler
mouss wrote: Matt Kettler wrote: Dale's Stuff wrote: Hello, Trying to figure out what the criteria is for getting a domain listed in sa-blacklist.current, and more importantly how to be de-listed. List: AFAIK, you only need to be the From: address on spam sent to one of Will Stern's spamtra

sa-update errors

2008-02-14 Thread Arthur Dent
Hello all, I run a bog-standard out-of-the-box (Fedora 8) SA (v.3.2.4) installation. Every night I run: sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 856AA88A && /sbin/service spamassassin restart as a cron job. Never been a problem before. But this morning

RE: False positive with scoring I don't understand

2008-02-14 Thread Bowie Bailey
Jari Fredriksson wrote: > > AWL should be renamed ABL, if it can produce such scores. Must be > pain. It is not well named, but think of it as a score balancer. It attempts to adjust the score towards the average score seen previously for a sender. If someone who has sent good mail in the past

Re: what are the criteria for being listed in sa-blacklist.current?

2008-02-14 Thread Matt Kettler
Jeff Chan wrote: Also, the sa-blacklist inclusion policy is at: http://www.stearns.org/sa-blacklist/README.policy Yes. It's unfortunate that many that use sa-blacklist fail to read this policy carefully. Many folks seem to mis-read: --- In short, I want this list to

Re: ok_languages doesn't seem to work

2008-02-14 Thread Matus UHLAR - fantomas
> > 100% of the non-English email we're getting is spam, so I > > added this to my local.cf file: > > > > > > ok_languages en > > > > > > However, I can't see that it's having any effect at all. > > I'm still getting tons of Russian and asian spams that > > don't seem to even be triggering any

Rule for Russian character sets

2008-02-14 Thread up
We're suddenly getting a ton of spam with koi8-r encoding...I tried to do a custom rule for it like this: header SUBJ_RUSS_CHAR Subject =~/koi8-r/i describe SUBJ_RUSS_CHAR has Russian char encoding score SUBJ_RUSS_CHAR3.5 The short headers for these spams look like

Re: Rule for Russian character sets

2008-02-14 Thread Per Jessen
[EMAIL PROTECTED] wrote: > > We're suddenly getting a ton of spam with koi8-r encoding...I tried to > do a custom rule for it like this: > > header SUBJ_RUSS_CHAR Subject =~/koi8-r/i > describe SUBJ_RUSS_CHAR has Russian char encoding > score SUBJ_RUSS_CHAR3.5 > >

Re: Rule for Russian character sets

2008-02-14 Thread Karsten Bräckelmann
On Thu, 2008-02-14 at 10:17 -0500, [EMAIL PROTECTED] wrote: > We're suddenly getting a ton of spam with koi8-r encoding...I tried to do > a custom rule for it like this: > > header SUBJ_RUSS_CHAR Subject =~/koi8-r/i > describe SUBJ_RUSS_CHAR has Russian char encoding > score SUBJ

Re: sa-learn --ham ground rules

2008-02-14 Thread Michelle Konzack
Am 2008-02-13 05:14:38, schrieb Karsten Bräckelmann: > On Sun, 2008-02-10 at 21:34 +0100, Michelle Konzack wrote: > > Am 2008-02-08 20:13:10, schrieb Karsten Bräckelmann: > > > > So what is the maximum number of files in a directory that one can feed > > > > to > > > > sa-learn --ham and expect i

Re: sa-learn --ham ground rules

2008-02-14 Thread Michelle Konzack
Am 2008-02-13 10:04:36, schrieb Matus UHLAR - fantomas: > you can just provide te directory name. sa-learn will then scan the > directory w/o args limit Sory, but I use "--dir" since ages and if I have over 1200-1400 messages sa-learn exit with an error message that I have exceed the limits... Th

RE: sa-compile format the standard now?

2008-02-14 Thread Rosenbaum, Larry M.
> From: Bowie Bailey [mailto:[EMAIL PROTECTED] > > I would say that sa-compile is the preferred method due to its > performance benefits. There aren't many (any?) drawbacks to using it. I don't use it here because it takes too long (over 20 minutes) to compile. (This is with SA v3.2.4, which is a

Re: Rule for Russian character sets

2008-02-14 Thread up
On Thu, 14 Feb 2008, Per Jessen wrote: > [EMAIL PROTECTED] wrote: > > > > > We're suddenly getting a ton of spam with koi8-r encoding...I tried to > > do a custom rule for it like this: > > > > header SUBJ_RUSS_CHAR Subject =~/koi8-r/i > > describe SUBJ_RUSS_CHAR has Russian char

RE: sa-compile format the standard now?

2008-02-14 Thread Bowie Bailey
Rosenbaum, Larry M. wrote: > > From: Bowie Bailey [mailto:[EMAIL PROTECTED] > > > > I would say that sa-compile is the preferred method due to its > > performance benefits. There aren't many (any?) drawbacks to using > > it. > > I don't use it here because it takes too long (over 20 minutes) to

RE: sa-compile format the standard now?

2008-02-14 Thread Robert - elists
> > I don't use it here because it takes too long (over 20 minutes) to > compile. > (This is with SA v3.2.4, which is a big improvement over v3.2.3) > > L Why would how long it takes to compile matter as long as you get some return on investment? Is the machine heavily loaded or just a small u

Rule for Images that show up anyway

2008-02-14 Thread Paul Douglas Franklin
I have Thunderbird set up not to show images by default. But some spammers have discovered a way to encode their images so that they show despite my settings. The latest example was exceptionally rude. Is there some rule that I could add to my local.cf to catch any e-mail that tries this end

RE: sa-compile format the standard now?

2008-02-14 Thread Rosenbaum, Larry M.
> From: Bowie Bailey [mailto:[EMAIL PROTECTED] > > Rosenbaum, Larry M. wrote: > > > From: Bowie Bailey [mailto:[EMAIL PROTECTED] > > > > > > I would say that sa-compile is the preferred method due to its > > > performance benefits. There aren't many (any?) drawbacks to using > > > it. > > > > I do

Re: ok_languages doesn't seem to work

2008-02-14 Thread Jari Fredriksson
>>> 100% of the non-English email we're getting is spam, so >>> I added this to my local.cf file: >>> >>> >>> ok_languages en >>> >>> >>> However, I can't see that it's having any effect at all. >>> I'm still getting tons of Russian and asian spams that >>> don't seem to even be triggering any

Re: Rule for Images that show up anyway

2008-02-14 Thread John Hardin
On Thu, 14 Feb 2008, Paul Douglas Franklin wrote: I have Thunderbird set up not to show images by default. But some spammers have discovered a way to encode their images so that they show despite my settings. The latest example was exceptionally rude. Is there some rule that I could add to my

RE: sa-compile format the standard now?

2008-02-14 Thread Bowie Bailey
Rosenbaum, Larry M. wrote: > > From: Bowie Bailey [mailto:[EMAIL PROTECTED] > > > > Rosenbaum, Larry M. wrote: > > > > From: Bowie Bailey [mailto:[EMAIL PROTECTED] > > > > > > > > I would say that sa-compile is the preferred method due to its > > > > performance benefits. There aren't many (any?

Re: ok_languages doesn't seem to work

2008-02-14 Thread Duane Hill
On Thu, 14 Feb 2008 19:52:01 +0200 "Jari Fredriksson" <[EMAIL PROTECTED]> wrote: > >>> 100% of the non-English email we're getting is spam, so > >>> I added this to my local.cf file: > >>> > >>> > >>> ok_languages en > >>> > >>> > >>> However, I can't see that it's having any effect at all. >

Re: Rule for Images that show up anyway

2008-02-14 Thread SM
At 09:21 14-02-2008, Paul Douglas Franklin wrote: I have Thunderbird set up not to show images by default. But some spammers have This is to block remote images. discovered a way to encode their images so that they show despite my settings. The latest example was exceptionally rude. Is ther

Re: Rule for Images that show up anyway

2008-02-14 Thread Paul Douglas Franklin
I had deleted the message yesterday--thoroughly--and didn't think to ask this until today. Concerning ImageInfo, which sounds like a likely candidate, it's not installed on my system. I have Kolab installed; it uses an earlier version of Spamassassin, I'm not sure exactly which one, somewhere

Re: Rule for Images that show up anyway

2008-02-14 Thread John Hardin
On Thu, 14 Feb 2008, Paul Douglas Franklin wrote: I had deleted the message yesterday--thoroughly--and didn't think to ask this until today. Concerning ImageInfo, which sounds like a likely candidate, it's not installed on my system. I have Kolab installed; it uses an earlier version of Spama

RE: Rule for Russian character sets

2008-02-14 Thread Michael Hutchinson
> -Original Message- > > > We're suddenly getting a ton of spam with koi8-r encoding...I tried to > > > do a custom rule for it like this: > > > > > > header SUBJ_RUSS_CHAR Subject =~/koi8-r/i > > > describe SUBJ_RUSS_CHAR has Russian char encoding > > > score SUBJ_RUSS_C

RE: Rule for Russian character sets

2008-02-14 Thread John Hardin
On Fri, 15 Feb 2008, Michael Hutchinson wrote: Are we not meant to delimit characters like a minus sign? Ex: header SUBJ_RUSS_CHAR Subject:raw =~ /koi8\-r/i Only where they have special meaning, and a dash is only "special" in a character set, e.g. [A-Z]. I have found the s

RE: Rule for Russian character sets

2008-02-14 Thread Michael Hutchinson
> -Original Message- > From: John Hardin [mailto:[EMAIL PROTECTED] > Sent: Friday, 15 February 2008 2:19 p.m. > To: Michael Hutchinson > Cc: users@spamassassin.apache.org > Subject: RE: Rule for Russian character sets > > On Fri, 15 Feb 2008, Michael Hutchinson wrote: > > > Are we not me

FW: Rule for Russian character sets

2008-02-14 Thread Michael Hutchinson
-Original Message- From: John Hardin [mailto:[EMAIL PROTECTED] Sent: Friday, 15 February 2008 3:07 p.m. To: Michael Hutchinson Subject: RE: Rule for Russian character sets On Fri, 15 Feb 2008, Michael Hutchinson wrote: > Now what about matching a question mark and an equals sign? An eq

RE: Rule for Russian character sets

2008-02-14 Thread Michael Hutchinson
> -Original Message- > From: John Hardin [mailto:[EMAIL PROTECTED] > Sent: Friday, 15 February 2008 3:07 p.m. > To: Michael Hutchinson > Subject: RE: Rule for Russian character sets > > On Fri, 15 Feb 2008, Michael Hutchinson wrote: > > > Now what about matching a question mark and an equ

RE: Rule for Russian character sets

2008-02-14 Thread Karsten Bräckelmann
On Fri, 2008-02-15 at 12:19 +1300, Michael Hutchinson wrote: [...] > Does anyone have suggestions for matching question marks and equals > signs in one line? I would like to match everything exactly between the > double quotes: Apart from neither equal nor minus being any special in an RE (outside

RE: Rule for Russian character sets

2008-02-14 Thread Michael Hutchinson
> -Original Message- > From: Karsten Bräckelmann [mailto:[EMAIL PROTECTED] > Sent: Friday, 15 February 2008 3:43 p.m. > To: users@spamassassin.apache.org > Subject: RE: Rule for Russian character sets > > On Fri, 2008-02-15 at 12:19 +1300, Michael Hutchinson wrote: > [...] > > Does anyone

Re: Rule for Russian character sets

2008-02-14 Thread Loren Wilton
Ok fair enough. I've noticed that having the \ doesn't hurt for a dash. Now what about matching a question mark and an equals sign? If you read perlre closely you will find it says that it never hurts to put a backslash before a special character that you want to match as a character. So this

Html font invisible or "low contrast" - no score?

2008-02-14 Thread Enrique Perez-Terron
I am trying to figure out why almost all spam continues to get through. I use Fedora 8, Evolution 2.12.3, and spamassassin 3.2.4 I have marked as junk, respectively as non-junk, more than 100 mails of each kind. Probably more than 200 by now. I have saved to a file the source of one ty