Question about Bayes training - mozilla specifically

2005-05-01 Thread Bookworm
tly off to SpamAssassin? For me, at least, that would eliminate almost all of the spam my server is receiving - Mozilla spots it instantly, but SpamAssassin is missing at least half. Troy Belding Bookworm Computing

Re: Question about Bayes training - mozilla specifically

2005-05-02 Thread Bookworm
Jo wrote: Bookworm wrote: I've read through the archives several times, and hoped that over the last year or so someone would build the functionality, or at least mention it one way or another - I haven't seen it. Is there any way to take an already trained Mozilla bayes structure a

Re: Question about Bayes training - mozilla specifically

2005-05-02 Thread Bookworm
Stuart Johnston wrote: Here is a project that will export the Mozilla Bayes tokens which would at least be the first step. I'm not sure how hard it would be to then import them into SA. http://bayesjunktool.mozdev.org/ Wonderful! Thank you very much. I'll see about exporting my Mozilla baye

Re: Confession and rage

2005-05-06 Thread Bookworm
List Mail User wrote: JohnS, As many of the regulars on this list can tell you, I *hate* spam as much as nearly anyone here; But... Mike is absolutely correct, what they have done is "slimely", but is not for most purposes "spam" (IANAL). It is UCE (unsolicited commercial email),

Re: Confession and rage

2005-05-07 Thread Bookworm
List Mail User wrote: To NOT be "spam" and be *cough* condoned UCE, it must 1) Tell you that you're going to get it when you sign up; or 1a) Send you a notification that you are now being signed up for it. (Southwestern Bell doesn't seem to do this either, btw. They created a new list and sig

Re: [OT]Appropriate OS and other software to work with SA

2005-05-13 Thread Bookworm
Bowie Bailey wrote: From: Ben Wylie [mailto:[EMAIL PROTECTED] Currently I am running my mailserver on a windows box. I have just bought a new server and will probably be running CentOS on it. I would like to migrate my mailserver onto this linux box so that hopefully I will be able to get a fas

Re: (OT, slightly) dealing with AOL spam reports?

2005-05-18 Thread Bookworm
Mike Jackson wrote: A couple days ago, I set up AOL's "feedback loop" (though the loop part is a misnomer, since you can't actually respond to the messages) so I could monitor complaints against my employer's servers. Looking through the messages AOL says their members reported as spam, I notic

Re: new meds spam agaianst SARS viruses? this may help

2005-05-22 Thread Bookworm
List Mail User wrote: Follow the trail; Chris Terrebonne's "NFP Inc." - snakeoil and spam/scammers of Slidell, LA - (985) 726-0928. They've been around a very long time (domains change weekly, but a few constants like remain conradpromotions. com, rednecks. com and myownemail.com). Th

Re: --lint tells me I need 0.34 dns

2005-05-22 Thread Bookworm
Tim Jackson wrote: On Fri, 20 May 2005 20:48:26 -0400 "Eric Wood" <[EMAIL PROTECTED]> wrote: [on Fedora Core 1] 2. What is the easiest way to update Net::DNS to 0.34 ? This was very easy: perl -MCPAN -e shell[as root] o conf prerequisites_policy ask

Startup scripts

2005-05-28 Thread Bookworm
Has anyone written a new startup script for Slackware? I hacked up a kludge that does the job, but it's not very good. BW

using sa-learn as a different user problem.

2005-06-12 Thread Bookworm
Most of the email I'm trying to run sa-learn on is owned by vpopmail, and my spamassassin runs as the user 'spamd'. Even when I try sa-learn -u spamd, it continually learns as 'root' - filling a bayes database in the root directory. Is there anyway to stop this? I REALLY don't want to have t

Re: Net::DNS problem?

2005-06-21 Thread Bookworm
[EMAIL PROTECTED] wrote: Irina wrote: I decided to downgrade it by downloading TAR. Installed prerequisites and the module itself just fine. Running spamassassin --lint and see the complaint about version of it is not numeric (0.49_03), therefore it can not compare 2 versions Argument "

Re: DDOS, Dictionary Attack... not sure what it is...

2007-12-31 Thread Bookworm
Mike Cisar wrote: Hi All, A bit off topic since the users are all unknown so the traffic never makes it to my spamassassin. But I am hoping that someone here may have seen the same thing and have a solution for making the problem "go-away" :-) I'm not sure whether it's supposed to be a DDOS at

Re: Plagued by spamassassin

2008-01-04 Thread Bookworm
Cedartech Administrator wrote: I have asked before but have been unable to get a usable solution. I am running qmail, spamassassin, clamav, etc from the qmr package on one of our FBSD 6.2 servers. If you email via squirrelmail, your outbound email does not get labeled spam. If you send out via

Re: DDOS, Dictionary Attack... not sure what it is...

2008-01-08 Thread Bookworm
Joseph Brennan wrote: Michelle Konzack <[EMAIL PROTECTED]> wrote: since the server rejects unknown recipients right away. Here too, but it eats nearly 100% of System- and CPU-Resources... It might be worth looking for a couple of addresses that get hit repeatedly and temporarily activating

Re: Bulk spam scan

2008-01-31 Thread Bookworm
Theo Van Dinter wrote: --mbox Specify that the input message(s) are in mbox format. mbox is a standard Unix message folder format. [...] To pick a very small nit - 'mbox' isn't referring to a folder. It's a file. 'maildir' could be called a folder format.

Blogspot spam update information (NetCraft statistics)

2008-03-27 Thread Bookworm
According to the Netcraft News for March, 2008, they showed some interesting growth in Blogspot. "Google increases its developer share by gaining 842 thousand hostnames; most of which are used for blogspot.com blogs." I wonder how many of those 842,000 blogspot.com blogs were autocreated spa

Re: What to do about address spoofing

2008-03-27 Thread Bookworm
Bowie Bailey wrote: R.Smits wrote: Hello, Is there something I can do that our company addresses cannot be used for sending spam ? Is DKIM an answer ? A lot of our users get "delivery failed" messages. So a spammer is sending spam with our addresses :-( A difficult problem I think ? Greeti

Re: dreaming of a plugin ....

2006-08-14 Thread Bookworm
[EMAIL PROTECTED] wrote: that analyzes and scores email addresses: we have big companies that give their employees more or less random strings as email addresses (but length will not be extremely long) Otherwise we have email addresses that somehow are built from a person's name, (e.g firs

Re: Using SA to prevent bouncing spam?

2006-08-15 Thread Bookworm
Ole Nomann Thomsen wrote: Den 15.08.2006 kl. 12:01 skrev Andreas Pettersson <[EMAIL PROTECTED]>: While I don't really see why ldap isn't an option, even with an 99% load, callout might be the solution. However, I don't run qmail but here's how it works with exim http://www.exim.org/exim-html-

Re: Problem with user_white_list

2006-09-23 Thread Bookworm
Matt Kettler wrote: Theo Van Dinter wrote: On Fri, Sep 22, 2006 at 04:01:20AM -0400, Matt Kettler wrote: The moral here is NEVER use whitelist_from. ...does this indicate that whitelist_from should be obsoleted? should, yes.. will be, probably no

Re: Razor removal

2006-10-02 Thread Bookworm
Robert Swan wrote: These guys are having lots of trouble sending email to people, they are using an exchange 2003 server and are not listed on any SPAM database anywhere, per.. http://www.dnsstuff.com/ Robert They may be using an Exchange Server for actually forwarding emails out, but it loo

Re: Delete all emails tagged by SA.

2006-10-03 Thread Bookworm
Shahzad Abid wrote: Dear Ed Kasky Thanks for such a nice suggetion and guidance currently I am using qtrap for my Qmail Server. Is there any other tool available ? Shahzad Abid You obviously haven't read the information on qmail-scanner. If you add the ST patch to qmail-scanner, you can

Spamassassin from CPAN and sa-update location.

2006-10-06 Thread Bookworm
should probably use the same default site rules directory as sa-update?) Bookworm

Re: Spamassassin from CPAN and sa-update location.

2006-10-06 Thread Bookworm
Bowie Bailey wrote: Bookworm wrote: When I build SpamAssassin using the CPAN method, it installs the test files (20_anti_ratware.cf and similar) in /usr/share/spamassassin. However, sa-update shoves updates into /var/lib/spamassassin/3.001005/updates_spamassassin_org (with extra crap in

Re: Any comments of the SpamHaus lawsuit?

2006-10-15 Thread Bookworm
Christopher Martin wrote: And, lastly, as much as US citizens hate to hear it, .org is NOT a US domain, .org.us is. The .com, .org, etc domains are international domains. The convention of assuming that the non country coded domains are US domains is simply a result of American hubris. It would a

[OT] Re: Domain names (Was: Any comments of the SpamHaus lawsuit?)

2006-10-16 Thread Bookworm
Jo Rhett wrote: Bookworm wrote: Just as a FYI, .com, .org, .edu, .mil, .gov, and .net were developed by the US when DNS was first being conceptualized. There were enough computers on the (D)ARPNET backbone that it was getting confusing to track hosts files. At that point, there wasn

S-P-A-M Extra long domain names rule?

2008-04-21 Thread Bookworm
I'm starting to see some new phishing/scam attempts. What I was thinking was that it might be worthwhile to add a rule to not so much check links, but count periods. Here's the example that just came in my email - (removing http:// ) - connect.colonialbank.webbizcompany.c6b5r64whf623lx426xq

Extra long domain names rule?

2008-04-23 Thread Bookworm
I'm starting to see some new phishing/scam attempts. What I was thinking was that it might be worthwhile to add a rule to not so much check links, but count periods. I was going to put in the web address that I received as an example, but I think that's why this is a second attempt - the first

Re: Extra long domain names rule?

2008-04-25 Thread Bookworm
Randy Ramsdell wrote: Bookworm wrote: I'm starting to see some new phishing/scam attempts. What I was thinking was that it might be worthwhile to add a rule to not so much check links, but count periods. I was going to put in the web address that I received as an example, but I think t

Re: Help with SED [OT]

2008-04-27 Thread Bookworm
Bill Randle wrote: On Sat, 2008-04-26 at 11:17 -0700, Marc Perkel wrote: Trying to do something that should be simple. Using sed to remove the first part of a hostname but not working. I want: abc.def.com to become def.com I tried a lot of variations of the following but it's either greedy

Re: 2 strange fatal SA errors

2008-05-05 Thread Bookworm
Christoph Petersen wrote: Hey guys, got some strange problem during my vacation the last week. For once it seems that the network stack of SA crashed so no new processes could be spawned or that the spamd crashed and blocked the port. The second problem looks very cryptic to me maybe some Perl g

Real fix for stock spams - pick up a pen

2006-11-16 Thread Bookworm
Pick up a pen, and write to your local congressman, or even to the SEC, and insist that they penalize those companies who are being pimped and pumped through spam emails. Today, I got one for Mobicom Communications. If that company had their chance to go public yanked, you could be sure that

Re: Real fix for stock spams - pick up a pen

2006-11-17 Thread Bookworm
Coffey, Neal wrote: Bookworm wrote: Pick up a pen, and write to your local congressman, or even to the SEC, and insist that they penalize those companies who are being pimped and pumped through spam emails. Why should they? The companies being advertised in the stock spams aren&#

Re: Real fix for stock spams - pick up a pen

2006-11-17 Thread Bookworm
Robert Braver wrote: On Thursday, November 16, 2006, 8:00:09 PM, Michael Scheidell wrote: MS> It was $500, and the law changed to make it impossible to collect MS> anymore. MS> Before, it was a 'first strike' and you owe $500. Now you have to 'opt MS> out' (they can still send you one) Opt-ou

Re: Percentage of email that is spam after filtering?

2006-11-24 Thread Bookworm
just about any other mail provider. (most hosting companies are CRAP for filtering). Bookworm Computing

Re: Percentage of email that is spam after filtering?

2006-11-25 Thread Bookworm
John Tice wrote: I am always amazed to hear how much gets through on corporate systems. My wife works in a corporate office with a dedicated IT department and she says 60-70% of their total received is spam. I would think that number to be intolerable. For instance, I have a VPS and host abou

Re: Odd behaviour (?) of my Qmail / Qmail Scanner / SpamAssassin 3.1.3 Setup?

2006-11-29 Thread Bookworm
Adam Wilbraham wrote: To follow up on this, the message in question is flagged as spam if i run it through spamassassin, however if I run it through spamc its not. spamc is what Qmail Scanner invokes. Is there a separate configuration for spamc / spamd to spamassassin? I thought not... It sound

Re: Odd behaviour (?) of my Qmail / Qmail Scanner / SpamAssassin 3.1.3 Setup?

2006-11-29 Thread Bookworm
Adam Wilbraham wrote: On Wed, 29 Nov 2006 08:22:13 -0600 Bookworm <[EMAIL PROTECTED]> wrote: It sounds like you have the spamd bayes database, and then you have the database for whatever user you're actually running the test from. I ran into this problem as well - it's a kn

Re: SPF is hopelessly broken and must die!

2006-12-13 Thread Bookworm
John Rudd wrote: Spam Assassin wrote: Why was this topic not started on the SPF list? Was the original poster of this topic looking to get MORE attention on the SpamAssassin list? Whether you and the other amateur-topic-police* like it or not, the subject is related to the more general subj