Re: AWL demoted??

On 8/10/2010 7:55 PM, Dennis German wrote: On Jul 22, 2010, at 10:47 AM, Michael Scheidell wrote:... due to performance vs accuracy issues, AWL was demoted in SA 3.3x. Can you please define "demoted". Changed from enabled by default to disabled by default, larg

Re: AWL demoted??

On 8/11/2010 1:30 PM, RW wrote: On Wed, 11 Aug 2010 07:48:11 -0400 Matt Kettler wrote: 1) lack of expiry process causes unbounded database growth. There's a script to clean out single-hit entries, but multi-hit persist forever, even when stale. (there are no timestamps on entries, so e

Re: Updating spam signatures file

On 8/16/2010 10:19 PM, Suhag P Desai wrote: I gone throughhttp://wiki.apache.org/spamassassin/RuleUpdates Below is my version.. SpamAssassin Server version 3.2.5 running on Perl 5.8.8 with SSL support (IO::Socket::SSL 1.31) with zlib support (Compress::Zlib 2.024) I have two directori

Re: mkdir error in lint

On 8/16/2010 10:53 PM, Mark Chaney wrote: When run lint, im getting the following error: Aug 16 21:47:16.112 [4457] dbg: config: mkdir /var/www/.spamassassin failed: mkdir /var/www/.spamassassin: Permission denied at /usr/share/perl5/Mail/SpamAssassin.pm line 1853 Though i have no idea wha

Re: Whitelist question

On 8/20/2010 9:09 PM, Alex wrote: Hi, I'm trying to use whitelist_from_rcvd and it doesn't appear to be working. I'm trying to whitelist mail from the AZ lottery. Here are the headers from the email: Received: from AZMTAQS01.AZ.GOV (azmtaprd01.az.gov [159.87.126.8]) From: "Arizona Lottery" Is

Re: Whitelist question

On 8/21/2010 1:27 AM, Henrik K wrote: On Sat, Aug 21, 2010 at 08:16:58AM +0300, Henrik K wrote: You need to use _envelope_ sender (e.g. Return-Path), not From. Never mind, I was confusing it with spf and read the docs.. For clarity: assuming your MTA inserts a Return-Path: header, or adds a

Re: Whitelist question

On 8/24/2010 1:13 PM, Alex wrote: Hi, For clarity: assuming your MTA inserts a Return-Path: header, or adds a clause to the Received header about the envelope sender, whitelist_from_rcvd will match against it, in addition to the From: header, and several other "from-like" headers. (however Res

Re: Spamassassin not checking user provided RBLs

On 9/2/2010 3:08 AM, Chris Datfung wrote: On Thu, Sep 2, 2010 at 5:06 AM, Benny Pedersen > wrote: On ons 01 sep 2010 22:47:36 CEST, Chris Datfung wrote header IN_NJABL_ORG rbleval:check_rbl('njabl','dnsbl.njabl.org.') describe IN_NJABL_ORG

Re: Spamassassin not checking user provided RBLs

On 9/2/2010 8:24 AM, Chris Datfung wrote: On Thu, Sep 2, 2010 at 2:30 PM, Matt Kettler <mailto:mkettler...@verizon.net>> wrote: Can you try again using a message, such as the sample-spam.txt that comes with the SA tarball. spamassassin < sample-spam.txt 2>&1 -D

Re: unblacklist_from_rcvd

On 9/7/2010 7:11 PM, William Taylor wrote: I want to be able to only allow a certain email to be sent from one of several hosts. Currently im doing something like: blacklist_from sa...@foo.com whitelist_from_rcvd sa...@foo.com mail.foo.com whitelist_from_rcvd sa...@foo.com sales.foo.com Thi

Re: rule SCORE expected 2.356, seems to be 1.731

On 9/10/2010 6:55 PM, Dennis German wrote: > Why does test TVD_APPROVED seem to have a score of > TVD_APPROVED 2.356 2.599 2.599 2.090 > on page http://spamassassin.apache.org/tests_3_3_x.html > > but the headers in my email show: > X-Spam-testscores: AWL=-0.600,BAYES_00=-2.599,RDNS_NONE=3.7,T

Re: user_prefs questions/problem

On 9/18/2010 4:57 PM, Chuck Campbell wrote: > I have SA set up and working (mostly) on my mail machine, however I've put the > following into my user_prefs: > > whitelist_from *...@zyngamail.com > and > whitelist_from_rcvd *...@zyngamail.com zyngamail.com > and > whitelist_allows_relays *...@zynga

Re: whitelist_return_path

On 12/19/2010 11:31 PM, jida...@jidanni.org wrote: > Gentlemen, I wish there was a > whitelist_from *...@facebookmail.com > rule that would use the Return-Path field, > > $ egrep '^(From|Return-Path):' a b > a:Return-Path: > a:From: Facebook > b:Return-Path: > b:From: Facebook > > as that is mu

Re: List Policy Question: Why no reply-to: header?

On 1/28/2011 5:28 PM, Benny Pedersen wrote: > On Fri, 28 Jan 2011 17:00:02 -0500, Adam Moffett > wrote: > >> Is there any particular reason there can't be a reply-to: header added >> by the listserv? > no its a mua problem to use list-post header when replying > In this case, the Benny is using T

Re: List Policy Question: Why no reply-to: header?

On 1/31/2011 2:51 AM, Matt Kettler wrote: > On 1/28/2011 5:28 PM, Benny Pedersen wrote: >> On Fri, 28 Jan 2011 17:00:02 -0500, Adam Moffett >> wrote: >> >>> Is there any particular reason there can't be a reply-to: header added >>> by the listserv? >

Re: Pyzor Server

On 2/4/2011 7:08 PM, User for SpamAssassin Mail List wrote: > > Hello, > > I don't keep constant eye on the mail server logs but did notice that > pyzor was not working. I've ping the server that I've been using for > years: > > # pyzor ping > 82.94.255.100:24441 TimeoutError: > > And see it is

Re: How to change a database (configuration)

On 6/1/2011 10:37 AM, monolit wrote: > Hello, > I am a newbie in using Spamassassin. I need your help as for configuration > of spamassasin. I use Debian Lenny Spamassassin 3.2.5 and I want to change > database from Berkeley DB to SDBM (because this database was recommended me > on this forum). >

Re: Understanding spamhaus FP

On 3/7/2013 1:51 PM, Alex wrote: > Hi, > > I received an email that was tagged with KHOP_SPAMHAUS_DROP, which > means it was listed in the "Spamhaus Don't Route Or Peer List". > However, I've checked every IP and domain in the email, and none are > listed on any spamhaus list, even as of a minute a

Re: Disable awl when some other rule hit

On 3/19/2014 1:44 PM, Joseph Brennan wrote: --On March 19, 2014 9:58:29 -0400 "Kevin A. McGrail" wrote: On 3/19/2014 5:14 AM, Nuno Fernandes wrote: Hello, Is it possible to disable awl (or at least score it 0.001) when a special rule hit like: if URIBL_DBL_SPAM score AWL 0 endif

Re: Oops - drug rules need more work

At 09:59 PM 5/8/2005, mouss wrote: rfci lists so many people that one can't rely on (they liste yahoo, aol, hotmail, ) except for a personal site (or a company where you can enforce your rules). A fashist approach might (seem to) work, but it'll never solve the real problems. /Agree.. I use

Re: Stupid rule question

At 10:52 AM 5/9/2005, Michael W Cocke wrote: Isn't getting caught by this rule? bodyMWC19 /americaspharma.com/i describeMWC19 local rule19 score MWC19 20.0 change it from a body rule to a uri rule, also for correctness add a \ in front of . (otherwise . is a wil

Re: Difference in scores between spamc and spamassassin

At 06:26 PM 5/9/2005, Nick Gilbert wrote: X-Spam-Status: Yes, score=10.8 required=5.0 tests=AWL,HELO_DYNAMIC_COMCAST,INFO_TLD,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET, RCVD_IN_SORBS_DUL,URIBL_OB_SURBL,URIBL_SBL autolearn=unavailable version=3.0.3 but: spamc < spa

Re: How do I use the localized reports

At 04:18 PM 9/1/2004 +0200, Morten Isaksen wrote: How do I use the localized reports in rules/30_text_.cf ? I have looked for a configurations settings but I could not find any. Set your LANG environment variable. Details are typicaly in man environ. One online site that has a reference on this (cr

Re: How do I use the localized reports

At 04:53 PM 9/1/2004 +0200, Morten Isaksen wrote: Hmm. Then it is a per server setting and not a per user setting. Right? Um.. no. Each process has it's own environment, there's not one LANG environment variable, but one per process. It should in my opinion be a normal SA configuration settings.

Re: How do I use the localized reports

At 11:04 AM 9/1/2004, Theo Van Dinter wrote: Yes, but what if people use spamd? LANG for spamc is irrelevent, and the LANG for spamd is a global default. Hmm, good point.. For some reason I was thinking when you did a setuid you picked up the .profile for the user you setuid'ed to, but that's cle

Re: missing attachments

At 03:30 PM 9/1/2004, Kara Chapman wrote: Has anyone had a problem with missing attachments? For the most part attachments go through fine, but recently I have gotten a few complaints. Not here.. Care to include any details about your setup? (sa version, mta used, how is SA called, etc) i.e.: I

Re: network tests stoped working

At 01:07 PM 9/2/2004 +0300, Alexander Piavka wrote: Now a couple of days ago on one hosts the network tests stoped working, while nothing was changed and both hosts are open in the firewall. Any ideas what could be the reason? First check for gross errors: spamassassin --lint Then try reso

Re: baysian filter - tokens signification

At 06:05 AM 9/2/2004, [EMAIL PROTECTED] wrote: I search the signification of the Baysian tokens eg. U* , N:HContent-type: , 8: etc etc Where can i find this information ? Look at Bayes.pm, it's a strange kind of short-hand used for headers and URLs. Disclaimer: I don't fully understand this code,

Re: update gmane with new list e-mail address?

At 11:16 AM 9/2/2004, exo dia wrote: is someone going to update news.gmane.org to subscribe to the new spamassassin list address? it looks like gmane is still using the old address, as no new articles for spamassassin are appearing there since the list move http://marc.theaimsgroup.com/?l=spamassa

Re: GTUBE won't go through?

At 12:19 PM 9/2/2004, Grant Baxter wrote: Does anyone have any ideas as to why I can't send the GTUBE text from "sample-spam.txt" to either myself or my wife? The emails just don't show up. That's odd.. are you using some kind of integration tool that wipes out emails over a certain score? BTW -

Re: Baysian Help

At 10:19 PM 9/2/2004 -0400, JP wrote: Now when I executed the same command as "you" I recieved a permissions error? Upon inspecting the Bayes DB files apparently the file bayes_toks is now owned by "me" and the permissions have been changed to 600. What am i missing here? What you're missing, and

Re: shifting the midpoint between the average spam and average ham

At 10:01 AM 9/3/2004 -0400, Joe Flowers wrote: One example: All of my users have set their "optimal" spam thresholds to some number between 0.0 and 10.0. If the SA developers correctly shift around test scores, add new and/or improved algorithms, etc., and I need to take advantage of the latest,

Re: New User, Errors

At 10:34 AM 9/7/2004, [EMAIL PROTECTED] wrote: mkdir .: Permission denied at /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin.pm line 825 procmail: Program failure (70) of "/usr/bin/spamassassin" procmail: Rescue of unfiltered data succeeded procmail: default rcfile is not an absolute path What I

Re: Bayes scoring weirdness?

At 05:15 PM 9/7/2004, Justin Mason wrote: BTW the idea of USER_IN_BLACKLIST being ignored for bayes is so that if a user screws up and accidentally BLs a ham source, it won't pollute Bayes as well. I think in 3.0.0 we've added more logic so that it won't be learned *at all* in that situation -- not

Re: Skip mail already checked mails?

At 09:43 AM 8/21/2004 +0200, you wrote: Here is a setup: domain.com MX 10 relay1.domain.com MX 20 relay2.domain.com relay1 & relay2 have booth a SpamAssassing running. Problem: when a mail is received on relay2, it's being check by SA and tagged as spam. Later, relay2 sent it to relay1.

Re: SpamAssissin

At 07:03 AM 9/8/2004, Seyyed Mehdi Sheikhalishahi wrote: I installed qmail and spamassissin on it. I don't know how configure spamass to have a blacklist, whitelist ? How update spam database of spamass for new spammer? First, read the manpage for the configuration. This will detail how to change

Re: Start an IP list to block?

At 04:56 PM 9/9/2004, Chris Santerre wrote: So is there a way to use the IP info in a good way? Could SA or SURBL do a quick ping of the URL and match against a URL? This would allow us to simply list 1 IP instead of all these domains. Chris, SA 3.0 appears to already support checking DNS blacklist

RE: Start an IP list to block?

At 05:23 PM 9/9/2004, Chris Santerre wrote: OOH yeah! I didn't know that! Are we sure this is actually what it means and not just a miss-syntaxed paragraph? It actually resolves the IP against the RBL lookup? If sowell then...problem solved, and devs get a cookie :) Actually, upon close

Re: USER_IN_BLACKLIST

At 07:02 PM 9/9/2004 -0500, John Fleming wrote: I got a spam that scored 100 for this: * 100 USER_IN_BLACKLIST From: address is in the user's black-list But I don't have any blacklist to my knowledge. I do site-wide filtering, and the mail was for me. Explanations? Tnx - John Clearly that's the

Re: Unbalanced Bayes SPAM / HAM Count

At 07:31 AM 9/10/2004, Gustafson, Tim wrote: What I'm worried about is that I have so many more SPAM than HAM messages. Is this dangerous? No, in fact it's closer to optimal than a 50-50 mix is... Remember, Bayes is a statistical system.. Statistics work best when they are as close to reality as p

Re: SpamAssassin timed out errors

At 06:11 PM 9/10/2004 -0400, Kevin Old wrote: Anyone have ideas why I'd be seeing these messages all of a sudden on a 2.64 installation with no changes? Sep 10 18:07:49 s15111287 MailScanner[28540]: SpamAssassin timed out and was killed, failure 13 of 20 Sep 10 18:07:50 s15111287 MailScanner[28540]

Re: Just how many addresses are there for this list?

At 09:11 AM 9/11/2004 -0500, you wrote: So far I have [EMAIL PROTECTED] users@spamassassin.apache.org users@spamassassin.apache.org is the current list address, however the old incubator address still forwards. Trying to filter all mail to this list. Don't use the To: address field, use the List

Re: Spammer using my domain name in FROM field

At 11:47 AM 9/11/2004 -0500, you wrote: Spammer apparently is using [EMAIL PROTECTED] in the FROm field of the emails he is sending out. Domain is one of my customers virtual domain, spammer made up the username in the email address. Now I am getting burried by mail notifications returning to s

Re: Spammer using my domain name in FROM field

At 12:18 PM 9/11/2004 -0700, p dont think wrote: BEWARE, however, that SPF is a hotly contested technology that breaks forwarding in many cases True, but if your domain is used for forwarding, you can simply not publish SPF records, or publish wide-open ones. However, this is really something fo

Re: Spammer using my domain name in FROM field

At 10:59 PM 9/11/2004 -0400, Vivek Khera wrote: But even if *I* don't use forwarding, one of my customers may. For example, if I need to email a customer of mine who is using, say, ieee.org forwarding, and it is redirecting to AOL, my SPF records will cause AOL to reject my message to my custom

Re: Spamd running on a different server

At 03:50 AM 9/12/2004 -0500, you wrote: 1. On the return trip back to spamc...spamc dies with a failed sanity check error. I suspect this is an error related to the user running spamc being different then the user running spamd. It shouldn't be.. Perhaps it might happen if the user running spam

Re: White listed

At 09:47 AM 9/12/2004 -0400, you wrote: Where on a system might you be able to read what is white listed ?... One fast, sure-fire way is to grep all the configfiles: grep whitelist /usr/share/spamassassin/*.cf grep whitelist /etc/mail/spamassassin/*.cf grep whitelist ~/.spam

Re: SORBS Fine - Views

At 07:00 PM 9/12/2004 +0100, you wrote: We run a large number of servers and do our best to keep ontop of spam reports etc.. One user recently enabled webmail fron Nuke and got a spammer using it to send out a ton of junk mail. The first reports we got we tracked it down and removed the site in que

Re: sa-learn & Maildir

At 10:30 PM 9/12/2004 -0400, you wrote: I am new to SpamAssassin and have collected quite a bit of mail to send to sa-learn. The problem is that all my mail is in Maildirs not in mboxes. How might I go about teaching SpamAssassin? sa-learn supports maildirs just fine. By default sa-learn assumes

Re: spamassassin-users on MARC

At 03:49 PM 9/13/2004, Al Sparks wrote: I noticed that the Mailing list ARChives (MARC) doesn't have any posts for September, for spamassassin-users. The apache web page does advertise that MARC is one of the archives that carries the list. Just wondering. === Al From the looks of it, MARC migh

Re: SORBS Fine - Views

At 05:06 PM 9/13/2004, Daniel Quinlan wrote: "Darren Casey" <[EMAIL PROTECTED]> writes: > However, SORBs are demanding $50 to remove the IP from the list. Their > comparison of speeding is something I find totally crazy. It's definitely not blackmail and I don't think it's extortion either, but the

Re: New Rules

At 06:43 PM 9/13/2004, Thompson´s Mail wrote: Do You know where I can download a new rules for SpamAssassin ? I would like a simple URL, where I can use a wget command, or some like this. For the primary ruleset, the only practical means up update is full-version upgrade. It's not possible or

Re: Lotus Notes

At 09:45 AM 9/14/2004, Ron McKeating wrote: Sadly not possible as these emails are getting rejected, we reject anything with a spam score over 10. So no I don't have the headers, but they are all happening to the same organisation and they are all lotus notes users. When your MTA rejects the email,

Re: Subject line

At 01:31 PM 9/14/2004, Roger E. Rustad, Jr. wrote: I second that. Often ppl on the list will (b)cc: users@spamassassin.apache.org, so we need something like a [listserv name] subject header. If you can find anything not covered in past threads, feel free to repost, but please read the archives fi

Re: Subject line

At 05:00 PM 9/14/2004, Michele Neylon::Blacknight Solutions wrote: I don't always use evolution and even if I did I would still prefer something in the subject line As I already said, other lists allow people to choose. The Apache list allows you to choose.. You can choose to implement it in proc

Re: Cannot whitelist this address

At 05:11 PM 9/14/2004, Tobin wrote: If anyone can help I thank you. I run SA on win32. We use a third party application which sends emails via SMTP from out DMZ to our mailserver. The email is generated with a spoofed name and then sent so the headers are partially fake. SA is detecting this and I

Re: autolearn=no flag?

At 07:26 PM 9/14/2004, Bill Landry wrote: I'm curious how to determine why a message gets flagged with "autolearn=no", as shown below: Well, as far as the learner was concerned it scored only whatever NO_REAL_NAME contributes in scoreset 0 or 1. In 2.60, that's 0.339 or 0.285. That's not high eno

Re: Subject line

At 08:40 PM 9/14/2004, Jim Maul wrote: > Good letter. Procmail is a wonder if we take the time to learn it. > Sure, great, i'd love to take the time to learn it...except that my installation doesnt use procmail at all. Any other ideas for all the people in the same boat as me? What do you use f

Re: Is this normal - off topic

At 03:07 AM 9/15/2004 -0700, Jeff Chan wrote: Sounds like your server is being "dictionary attacked", i.e. bad guys are looking for valid mail addresses by trying many different common ones. In other words they try many and the ones that don't result in the "unknown user" response, they add to the

Re: Cannot whitelist this address

At 10:24 AM 9/15/2004, Tobin wrote: Thanks for your response. I tried whitelisting the spoofed address. And then yes the IP which I know is porposterous but Im desparate. Then I whitelisted the SMTP DNS name which is also wrong. Im lost as to what I should do. whitelist_from 216.136.XX.XX

Re: Spammers Bypassing Whitelists

At 04:05 PM 9/15/2004, Dan Mahoney, System Admin wrote: I'm seeing spammers bypass whitelists by appending a few characters to my own username and using it as their own. Rule #1.. Never whitelist_from your own domain.. It doesn't work. Spammers always forge From: addresses and frequently forge yo

Re: [OT] FUN: Something to send your family members!

At 05:00 PM 9/15/2004, Vivek Khera wrote: On my desk at gradual school, Hmm... gradual school.. Is this the opposite of "crash course"? Sorry Vivek, couldn't resist that :)

Re: Rule Suggestion

At 07:13 PM 9/15/2004, Dan Mahoney, System Admin wrote: For example, my father's wife peggy has the domain peggytaggart.com, she ONLY gives out the peggy@ email address for this. For some unknown reason, the whole domain is popular with spammers. I've added a global rule in my virtusertable to

Re: Skip mail already checked mails?

At 03:43 AM 8/21/2004, Xavier wrote: relay1 & relay2 have booth a SpamAssassing running. Problem: when a mail is received on relay2, it's being check by SA and tagged as spam. Later, relay2 sent it to relay1. relay1 don't mark it as spam??? How to re-use the tags added by relay2? How do you call SA

Re: Memory usage question

At 09:26 PM 9/16/2004, Robert Bartlett wrote: I remember someone saying something about memory usage per email that spamd uses to scan? But cannot find the email, what is the estimated amount of memory used per SA scan? I also have clamav set up Varies a lot depending on your configuration (bayes

RE: Memory usage question

At 06:56 PM 9/16/2004 -0700, Robert Bartlett wrote: Thanks for the reply! Here is the deal, we are currently deciding what we want to do next. Currently we have a Celeron 2.4 gig system with 256 megs of ram and a 40 gig hdd. In the past week or so our system has come to a halt, under 3 megs availab

RE: Memory usage question

At 09:23 AM 9/17/2004, Robert Bartlett wrote: Are you using the -m parameter of spamd to limit the number of children it will spawn? I'd suggest something like -m 6 to start with. Yeah it is setup for 50: -d -c -a -m50 -u user -v -H 50 is a LOT of spamd's... even at the low-end of 15mb each that's

Re: spam w/ special characters

At 06:21 PM 9/18/2004 +0300, Marie Fischer wrote: Hello, in the last week or two, we have been getting some spam that spamassassin doesn't seem to recognize. A common feature of all these messages seems to be that they contain lots of special characters (~, ^, `, and others) mixed into the text. I

Re: stripping SA headers for reporting? (spamcop, etc.)

At 03:32 PM 9/18/2004 +, John Owens wrote: I'd like to send as original a message as I can to SpamCop and other places since they don't like munged reports. Currently I'm doing this manually, which is annoying. I note that sa-learn knows how to remove all SA-specific annotations from a message

Re: Unsubscribing

At 02:16 PM 9/20/2004 +0200, Andy wrote: You already had a look to the headers? Andy, that's doubtful. Julia's on an exchange box, and last I heard, Outlook hides list-* headers from users. Maybe they've fixed that since the List-* headers are an RFC standard way of handling lists, but that doesn

Re: Spammers adding SA Headers?

At 01:15 AM 9/20/2004 -0400, Eggleton, Michael wrote: My question is: Is it spamassassin that is seeing the other X-Spam-Status header and using it over again? or is it SA-Qmail-Scanner? It's not spamassassin.. try it yourself on the command line.. SA always clobbers the existing X-Spam-Status

Re: Errors in procmail.log

At 11:34 AM 9/20/2004, [EMAIL PROTECTED] wrote: Hey all, posed this question a week ago, never got an answer, so Im trying again. Redhat and Sendmail and the procmail get this occasionally: mkdir .: Permission denied at /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin.pm line 825 procmail: Progr

Re: 'body', 'uri', 'rawbody' rules ...

At 03:51 PM 9/20/2004, Shane Metler wrote: describeSKM_SPAM_LIST_B_236 SKM Rules bodySKM_SPAM_LIST_B_236 m/jgsgfta\.com/i score SKM_SPAM_LIST_B_236 50.0 Style note: the m modifier to regexes is pointless for body rules. All EOL's ar

Re: Upgrading 2.55 -> 2.64

At 08:01 PM 9/20/2004 -0500, Andy Norris wrote: Sorry if this is old news, but we just got on a new dedicated server, and it's stuck at v2.55. Our old server had 2.64, and some of our settings didn't make it over in the move. Please point me in the right direction for upgrading to 2.64. We're r

Re: SpamAssissian

At 01:59 AM 9/21/2004, Mehdi wrote: Do spamassissian has database to keep spam soruce servers? No, Spamassassin doesn't have it's own database of spam source servers. However, it will check quite a large number of DNS based RBLs if you have the Net::DNS perl module installed.

Re: Auto White List

At 06:59 PM 9/22/2004, Rick Macdougall wrote: I've upgraded two machines so far today and I'm seeing AWL hits that *reduce* the score of obvious spam. This in and of itself is not a problem, unless it's causing false negatives. It's impossible for the AWL to always give positive scores to spam, un

Re: Auto White List

At 07:38 PM 9/22/2004 -0400, Rick Macdougall wrote: Yup, I understand how the whole AWL works but my problem is that border line spam is being dropped to ham. Example: A normal markup of 5.6 and an AWL score of -0.8 drops it below the average user required_hits of 5 and does not get marked as s

Re: SlashDotting spammers

At 01:05 AM 9/23/2004 -0700, Will Yardley wrote: > It makes me wonder if there's some way to grab a random link from SURBL to > consume a spammer's bandwidth allocation. This scheme has been suggested before. There are a couple of reasons why it's not a good idea... And let's not forget: 3) this co

Re: RBL tests

At 09:36 AM 9/23/2004, Jerry Gaiser wrote: Ok, I know I'm probably missing something, but since upgrading to 3.0 RBL tests don't seem to being executed. I use nothing but Bayes and RBL and have had good results through the 2.6x series, but no reports since the upgrade. I have made to changes to loc

Re: Whitelisting question

At 11:20 AM 9/23/2004, Andy Norris wrote: I am adding those listings on the new server to the file /usr/share/spamassassin/60_whitelist.cf. I forgot a few: 4) do not edit files in /usr/share/spamassassin unless you REALLY know what you are doing. These files are considered to be a part of spamass

Re: Whitelisting question

At 11:20 AM 9/23/2004, Andy Norris wrote: We're migrating from one server to another. Both now have the same versions of SpamAssassin (2.64) and MailScanner running. We had all our whitelisting on the old server going on in /etc/MailScanner/rules/spam.whitelist.rules. Those listed in that file

Re: Low scores for Bayes

At 01:43 PM 9/23/2004, German Staltari wrote: Hi, I would like to know why the Bayes rules has so low scores. Read the FAQ, this explains how most rule scores are assigned, including bayes: http://wiki.apache.org/spamassassin/HowScoresAreAssigned Basically, it's the result of a real-world statisti

Re: Auto Training Filtering Gateway

At 02:51 PM 9/23/2004, Gary Buckmaster wrote: To this end, I've considered setting up spam@ and notspam@ accounts on the gateway itself, and having local users send appropriate samples to these accounts, then running sa-learn against these. Does this approach make a great deal of sense? Only if y

Re: t/prefs_include fails

At 05:27 PM 9/23/2004, Ray wrote: Hi all, Trying to install from CPAN and get the following message on make test. t/prefs_include.Not found: qp-encoded-desc = Invalid Date: header =ae =af =b0 foo # Failed test 1 in t/SATest.pm at line 530 t/prefs_include.FAILED test 1

Re: Couple of questions with SA 3.0

At 07:41 AM 9/24/2004, Chris Connell wrote: Hi, I have installed spamassassin 3.0 on an email gateway, I noticed on a debug it threw out an error with the line check_mx_attempts 0 config: SpamAssassin failed to parse line, skipping: check_mx_attempts 0 Is this option disabled or removed in 3.0? Lo

Re: Spammers using my server

At 10:39 AM 9/24/2004, Jay Ehrhart wrote: This morning I had over 7000 emails in my Linux server's outbound queue which I deleted. My firewall log shows over 20,000 emails went out with a SunTrust bank announce saying to login and enter your username and password. I do not see the emails coming in

Re: clear_headers does not remove X-Spam-Report

At 12:44 PM 9/24/2004, Matt Garretson wrote: With SA 3.0, using clear_headers in local.cf does not prevent the "X-Spam-Report:" header from being inserted into spam messages. Is this a bug or a feature? Below is my local.cf. ### +++ required_score 8.0 clear_headers report_safe 0 It's parsing ord

Re: Problem with Bayes and AutoLearning

At 03:40 PM 9/24/2004, Thomas Bolioli wrote: bayes_path ~/.spammer This statement is invalid if a directory named ".spammer" exists in the user's home.. Please read the docs on bayes_path VERY carefully. Despite being named "path" it's really "path, plus filename prefix". Thus bayes_path should

Re: Problem with Bayes and AutoLearning

At 04:10 PM 9/24/2004, Thomas Bolioli wrote: I do not believe that is an issue. It only puts the bayes databases at ~/.spammer_toks and ~/.spammer_seen. sa-learn has not had a problem loading the databases. They have grown everytime I have used it. I can't see why spamd would have a problem with

Re: Razor-Agent 2.61

At 11:50 PM 9/25/2004 -0500, Thomas Cameron wrote: I finally created RPMs for Razor-Agent 2.61 on FC2. I've read through the man pages for razor-check and razor-report and I am pretty sure I understand how to use them, but do I really need to directly use these tools? Or does SA use Razor auto

Re: Problem with bayes autolearn on 3.0.0

At 09:39 AM 9/27/2004 -0400, Tan, William wrote: I'm having a problem with autolearn on a newly installed system. It seems as though the Bayes database is not recognized. I get messages about autolearn failing like this: Sep 27 02:16:00 host spamd[2113]: result: Y 22 - COMBINED_FROM,DCC_CHECK

Re: Activating the RelayCountry plug-in?

At 11:50 AM 9/27/2004, David Gibbs wrote: loadplugin Mail::SpamAssassin::Plugin::RelayCountry ... and restarted spamd. My messages, however, do not have any additional information that indicates the country the message was relayed through. I do have IP::Country::Fast installed. I don't believ

Re: problem runnning spamassassin -D --lint with spamassassin 3.0

At 03:57 PM 9/27/2004, scohen wrote: When I run spamassassin -D --lint I am noticing this message: "config: SpamAssassin failed to parse line, skipping: rewrite_subject 0 Argument "" isn't numeric in addition (+) at /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Conf/Parser.pm line 572." Spamassa

Re: How did this not get tagged??

At 01:30 PM 9/27/2004, Robert Leonard wrote: I got the following in my headers.. I'm not sure how this could possibly score so low, with all the hits it received... A large number of hits doesn't imply it must have a high score.. Lots of those rules have much less than 0.1 points.. and what's t

RE: How did this not get tagged??

At 02:50 PM 9/27/2004, Robert Leonard wrote: I removed the custom rule for OPTO_HEADER, and just got this one through.. also seems suspicious... X-Spam-Status: No, hits=4.1 required=5.5 tests=AWL,BAYES_50,HTML_FONT_BIG, HTML_FONT_FACE_BAD,HTML_IMAGE_ONLY_16,HTML_IMAGE_RATIO_02, HTML_MESSAGE,HTM

Re: serious problems after upgrade

1) SA 3.0 has it's own built in support for URI RBLs, but it is implemented differently than Mail::SpamcopURI does it. rm /etc/mail/spamassassin/spamcop_uri.cf 2) you need to upgrade the version of your bayes DB, as per the instructions in the UPGRADE file sa-learn --sync 3) Sho

Re: clearing house question

At 01:32 AM 9/28/2004, Muhammad Talha wrote: Dear all what is best clearing house database ( Vipul's Razor, Pyzor, and DCC ) to be used with spamassassin. I currently use Razor 2.61 and DCC. Both work quite well. Pyzor, I've never tried. Prior to 2.61 and the introduction of e8 Razor was mostly

Re: When and Why go to 3.0

At 10:24 AM 9/28/2004, Felipe Tonioli wrote: Maybe looks like a easy question, but isn't... I have a Small traffic of messages, around 350 messages per day with an average of 130 of that are spam... my big "problem" is the time out, what is a problem of my machine... i think that i stop around 95%

Re: Should I use RBL?

At 08:43 PM 9/28/2004 -0700, Erik Wickstrom wrote: Just wanted to get your opinion on whether or not I should have RBL activated? I have read some mixed opinions so far. Does it create alot of false positives (vice versa)? My opinion is that RBLs are lousy as a single-point criteria for spam if

Re: Whitelist_to -- explicit pass

At 10:03 AM 9/29/2004, Dan Mahoney, System Admin wrote: I want to set up a whitelist_to for my abuse@ address, but the problem is that it only kicks the score down by six, and when people are forwarding spam to it, well, the score's still WAY too high. Is there some setting that will just say "d

  1   2   3   4   5   6   7   8   9   10   >