Re: SpamAssassin service file missing after installation

2010-10-27 Thread Nigel Frankcom
Those are not optional modules. You can either install them from CPAN or from yum (depending on the repo you use) As a rule if it says REQUIRED, it probably is :-) Apologies if this is teaching you to suck eggs: In CPAN type: install Digest::SHA Or in yum, do yum list available and look in th

Comment - GFI/SORBS

2010-12-14 Thread Nigel Frankcom
Hi All, Is sorbs going to be continued as a scoring option in SA? Having hit yet more problems with them I've zeroed their scoring. I found this a couple of days ago, maybe it can add weight. http://blog.wordtothewise.com/2010/12/gfi-sorbs-considered-harmful/ Best to all Nigel

Re: Comment - GFI/SORBS

2010-12-15 Thread Nigel Frankcom
This is a long and somewhat complex story. I've been running my own mail for 15+ years or so, always on a fixed IP. A few years ago business picked up so I got some additional IP's from my supplier (BT); it turned out that they were "decommissioned" DUL's renewed as statics. Initially we jumped the

Re: Comment - GFI/SORBS

2010-12-15 Thread Nigel Frankcom
On Wed, 15 Dec 2010 07:04:18 +, "corpus.defero" wrote: > >> Ultimately, this seems to be more of a witch hunt against SORBS than a >> SA issue. Although I'm not opposed to a SORBS witch hunt, I don't think >> it belongs here. > >Indeed, and it's Lynford and his money grabbing cronies mostl

Re: [Asrg] draft-levine-iprangepub-01

2010-12-29 Thread Nigel Frankcom
On Wed, 29 Dec 2010 15:26:07 -0500, "David F. Skoll" wrote: >On Wed, 29 Dec 2010 21:09:42 +0100 >Matthias Leisi wrote: > >> I'm not sure whether that would be more appropriate for the dev list, >> but I guess this is relevant/of interest to the SpamAssassin project, >> and I don't know whether t

sa-updates

2011-03-10 Thread Nigel Frankcom
Hi All, Apologies if this has been covered, an admittedly fairly cursory Google showed nothing new. My local sa-update hasn't updated in the better part of a month. Is it that there have been no updates or do I need to dig into my systems to see what I broke, how and when? Regards to all Nigel

Re: Performance on Spear Phishing?

2011-03-17 Thread Nigel Frankcom
Unrelated but reminded me I hadn't posted a thanks to all those that responded about the sa-update rules. That's partly because I'm awaiting permission from clients to add their mails to the corpus. So, thanks all. Apologies for forgetting my manners. Have no clue about Spear Phishing other than

Re: Performance on Spear Phishing?

2011-03-18 Thread Nigel Frankcom
On Fri, 18 Mar 2011 04:22:40 +0100, Karsten Bräckelmann wrote: >On Thu, 2011-03-17 at 12:58 +0000, Nigel Frankcom wrote: >> Unrelated but reminded me I hadn't posted a thanks to all those that >> responded about the sa-update rules. That's partly because I'm >&

Re: RCVD_IN_SORBS_DUL on my own emails to self

2011-04-10 Thread Nigel Frankcom
On Sun, 10 Apr 2011 00:59:29 +0200, Michelle Konzack wrote: >Hello rstarkov, > >Am 2011-04-09 15:50:36, hacktest Du folgendes herunter: >> Does your header definitely include an ESMTP marker as per the RFC? Mine >> didn't; that was the real issue. We didn't find a bug in this rule. So I >> guess

Re: Not sure if this is old or new

2011-09-22 Thread Nigel Frankcom
On Wed, 21 Sep 2011 17:08:42 +0200, Matus UHLAR - fantomas wrote: >On 20.09.11 18:57, Nigel Frankcom wrote: >>I moved SA to a newer box and have the following output in my logs: >>http://pastebin.com/VvZfXwAC >> >>Apologies if I'm being dense, but is there a wa

Re: Bayes database in mysql on multiple servers

2011-11-30 Thread Nigel Frankcom
On Wed, 30 Nov 2011 15:14:33 + (UTC), Walter Hurry wrote: >On Wed, 30 Nov 2011 09:11:49 +0100, Robert Schetterer wrote: > >> Am 30.11.2011 09:06, schrieb Matus UHLAR - fantomas: >>> On 30.11.11 00:17, Alex wrote: I have two fedora15 boxes that process mail for a few domains, and rec

Re: mass check tips and tricks - need advice

2013-02-18 Thread Nigel Frankcom
Damn, I thought I had you in my junk list - play nice spammer and keep one address? On Sun, 17 Feb 2013 08:34:15 -0800, Marc Perkel wrote: >OK - I'm getting mass checking set up and working. I'm still in the >testing phase. > >Right now the process of selecting spam and ham is automated. It's n

SA headers suddenly stopped appearing in List mails.

2004-11-02 Thread Nigel Frankcom
Hi All, Did anything change in the SA lists since Sunday? Have had SA 3.0 running happily here since it came out (win32/cygwin) - from Sunday I started seeing mail from the list (and annoyingly some 419ers too) with no SA headers at all - a check of the logs for spamd shows it never even saw the

OT - MySQL/SA/PTR records

2004-12-31 Thread Nigel Frankcom
Hi all, Just a quick note to say, I *finally* got my SA working faster by adding PTR records for the MySQL server. The speed difference is astounding, on FC3 the turnaround time on a test mail has gone from 1 minute plus down to 1 - 2 seconds. Standard mail is running so much faster that compari

Re: Re: Sudden spam volume decrease?

2005-01-14 Thread Nigel Frankcom
I do wonder if spam fell off at about 12.30 GMT - about the time BT binned a few adsl's in error... of course http://news.bbc.co.uk/1/hi/business/4175805.stm On Fri, 14 Jan 2005 12:47:34 -0800, "jdow" <[EMAIL PROTECTED]> wrote: >From: "John Wilcock" <[EMAIL PROTECTED]> > >> Menno van Benn

Clustered MySQL with SA

2005-02-15 Thread Nigel Frankcom
Hi All, Could anyone point me towards any useful info on how to cluster the SA MySQL backend (Bayesian etc.)? TIA Nigel

Re: Re: Clustered MySQL with SA

2005-02-16 Thread Nigel Frankcom
PROTECTED]> wrote: >On Tue, Feb 15, 2005 at 10:28:41PM +, Nigel Frankcom wrote: >> >> Could anyone point me towards any useful info on how to cluster the SA >> MySQL backend (Bayesian etc.)? >> > >Here is a nice little HOWTO: >http://dev.mysql.com/t

I like this one.... Particularly the BS from Yahoo.....

2005-04-12 Thread Nigel Frankcom
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; b=FU1UmmgKvRlCBEUg1CKomcMMxShgfcM6WKgaJSOKD9D0tUHOxKzy603V5zIMC3MtpLdfh9CN/aRG7HzHYI2nIPlWHYJyO8PxAAl3qroxRQY3KDINcs+qaZSygSnd/nXp+5Yk1fezlUnFxDtEdUcy5YEQ676bu/ksh4+

Re: Re: I like this one.... Particularly the BS from Yahoo.....

2005-04-12 Thread Nigel Frankcom
caused :-D Nigel On Tue, 12 Apr 2005 16:53:50 -0400, Matt Kettler <[EMAIL PROTECTED]> wrote: >Nigel Frankcom wrote: > >>Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys >>DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; >

Re: Re: I like this one.... Particularly the BS from Yahoo.....

2005-04-12 Thread Nigel Frankcom
Point accepted, but - why do they market it as such? Nigel On Tue, 12 Apr 2005 17:45:01 -0400, Matt Kettler <[EMAIL PROTECTED]> wrote: >Nigel Frankcom wrote: > >>Admittedly not much, >> >>My biggest issue was yahoo sporting anti spam options in a spam mail. >&g

Possibly useful Stats Script.

2005-06-09 Thread Nigel Frankcom
Hi, A colleague has written a script to supply some summary (and detail) statistics for SA. I've not been able to get anything of much Admin use from sa-stats.pl; during setup and conf (and day to day running) I'm interested in scantimes and mean averages. Craig Morrison has written a script for

Re: Re: shared SQL DB

2005-06-14 Thread Nigel Frankcom
Hi All, It's 5 SA actually :-D - and I've not noted any problems that didn't come down to slight differences in config between SA servers, once standardised they run much the same. The single MySQL is working well, my only concern being that I still haven't managed to eliminate a potential singl

Re: RE: Re: shared SQL DB

2005-06-14 Thread Nigel Frankcom
A code to verify the primary connection is >established, and if not , roll onto a second (backup) server. > >-- >Matthew Yette >Senior Engineer - NOC/Operations >MA Polce Consulting, Inc. >[EMAIL PROTECTED] >315-838-1644 (w) >315-356-0597 (f) >AIM/Yahoo: MAPolceNOC >MSN: [E

Re: SA round-robin in exim ~ BAYES

2005-06-20 Thread Nigel Frankcom
I've used local MySQL on several SA servers before now (without a cluster). It worked well. I used the same bayes database to 'seed' all of the servers so they at least started with the same data. I didn't notice any huge differences in scores and on the whole it worked well - if inelegantly. Nig

Re: MS outlook can't read parsed email... HELP!!

2007-08-12 Thread Nigel Frankcom
On Sun, 12 Aug 2007 21:52:28 -0700, Evan Platt <[EMAIL PROTECTED]> wrote: >At 08:19 PM 8/12/2007, lynk wrote: > >>I'm totally confused re this spamassassin thingy... i can't seem to get MS >>outlook to read the email i received (spam/ham) after spamassassin(3.1.9) >>scanned the message. > >You pos

Re: Listowner?

2007-08-13 Thread Nigel Frankcom
On Mon, 13 Aug 2007 06:33:04 -0700, Evan Platt <[EMAIL PROTECTED]> wrote: >I didn't see a header for a listowner contact.. I did see a 'help', >but not sure if that goes to a human or not. > >I'm getting a OOO e-mail for every post to the list (yes, 3 so far, >this will make 4) from Tom Stockton

Re: required module out of date (revised, sorry)

2007-09-09 Thread Nigel Frankcom
On Sun, 9 Sep 2007 08:32:29 -0700 (PDT), Geno <[EMAIL PROTECTED]> wrote: >I sent the email too soon. My apologies. > >I'm not the owner of the server. My host uses >Redhat Linux Enterprise 3 and I'm trying to >install Spamassassin 3.2.3. I don't know much >about linux and I'm trying to install thi

Re: List of 700,000 IP addresses of virus infected computers

2007-09-12 Thread Nigel Frankcom
Don't feed the animals ? I must have been dreaming when I saw the post about this and OT posts (said he joining in an OT post)

Re: FW: List of 700,000 IP addresses of virus infected computers

2007-09-14 Thread Nigel Frankcom
On Fri, 14 Sep 2007 09:07:32 -0700, Jeff Shepherd <[EMAIL PROTECTED]> wrote: > >> My my - I criticize one of the noise makers by pointing out the > >> meta-troll's silliness so Marc responds by blacklisting me. This is > >> getting interesting in a psychological sense. > >> > >> {^_-}I'm still

Re: unsubscribe

2007-09-27 Thread Nigel Frankcom
On Thu, 27 Sep 2007 11:59:26 +0400, "Livitin Sergey" <[EMAIL PROTECTED]> wrote: >unsubscribe list-unsubscribe:

Re: Bayes innodb problems

2007-09-29 Thread Nigel Frankcom
On Sat, 29 Sep 2007 03:24:17 +0200, Alex Woick <[EMAIL PROTECTED]> wrote: processing has ground down to really slow. I'm seeing some incredibly long queries now in my slow-query log, such as: >>> Try an "optimize table " for each of the sa >>> tables. You just filled the database f

Re: [users] Clash of 2 SPF packages

2007-10-04 Thread Nigel Frankcom
On Thu, 4 Oct 2007 19:43:00 +0200 (CEST), Dag Wieers <[EMAIL PROTECTED]> wrote: >On Thu, 4 Oct 2007, Hugo van der Kooij wrote: > >> On Thu, 4 Oct 2007, Dag Wieers wrote: >> >> > That said, I wouldn't mind removing spfquery from one of the packages in >> > order to allow both packages to be co-inst

Re: unsubscribed

2007-10-12 Thread Nigel Frankcom
I am amazed at the number of list users that unsubscribe from an anti spam list and yet they fail to look at the headers of the mails they receive list-unsubscribe: Not sure what the message says though, I don't speak German :-) On Fri, 12 Oct 2007 12:15:31 +0200, "Seb

Re: unsubscribed

2007-10-12 Thread Nigel Frankcom
rding to babelfishm "Mit freundlichen Grüßen" means "yours sincerely". > >At 04:33 AM 10/12/2007, Nigel Frankcom wrote: >>I am amazed at the number of list users that unsubscribe from an anti >>spam list and yet they fail to look at the headers of the mails they

Re: unsubscribed

2007-10-17 Thread Nigel Frankcom
On Thu, 18 Oct 2007 00:16:06 +0200, mouss <[EMAIL PROTECTED]> wrote: >Rob Sterenborg wrote: >> Steve Ingraham wrote: >> >>> I cannot help but comment on this post. >>> >> >> Neither can I. >> >> >>> I am one of those ignorant people that is subscribed to this list >>> (along with severa

Re: Top spam hosters, how to decline email mentioning them

2007-10-20 Thread Nigel Frankcom
On Sat, 20 Oct 2007 23:27:41 -0500, Igor Chudov <[EMAIL PROTECTED]> wrote: >I was looking at this article > > http://en.wikipedia.org/wiki/E-mail_spam > >It claims that "only five countries are hosting 99.68% of the global >spammer websites", of which the foremost is China, hosting 73.58% of >all

Re: Top spam hosters, how to decline email mentioning them

2007-10-21 Thread Nigel Frankcom
On Sat, 20 Oct 2007 23:27:41 -0500, Igor Chudov <[EMAIL PROTECTED]> wrote: >I was looking at this article > > http://en.wikipedia.org/wiki/E-mail_spam > >It claims that "only five countries are hosting 99.68% of the global >spammer websites", of which the foremost is China, hosting 73.58% of >all

Re: Top spam hosters, how to decline email mentioning them

2007-10-22 Thread Nigel Frankcom
On Mon, 22 Oct 2007 00:07:17 -0700, Bill Landry <[EMAIL PROTECTED]> wrote: >I don't how one could determine the IP address associated with a URL in >the body of a message at the MTA level without accepting the message >first for further processing. The best you could do at the MTA level is >bloc

Re: blacklist.cf needs to die (was Re: Help figuring our why SA is taking like 1.5 minutes to filter...)

2007-10-26 Thread Nigel Frankcom
On Fri, 26 Oct 2007 09:43:37 -0700 (PPT), "John D. Hardin" <[EMAIL PROTECTED]> wrote: >On Fri, 26 Oct 2007, Duane Hill wrote: > >> > But people don't read logs, or they would know... I'd suggest die-ing >> > instead. >> >> Why not make it a configurable option in local.cf defaulting to >> die. T

Re: URIBL

2008-02-20 Thread Nigel Frankcom
On Wed, 20 Feb 2008 16:40:33 +0100, "Rocco Scappatura" <[EMAIL PROTECTED]> wrote: >During last days I have noticed an increasing of 'rejected' messages. > >I'm currently using 'zen.spamhaus.org' and 'list.dsbl.org' as reputation >servers. > >At the same time, the number of false negative is growth

Re: Time to make multi.uribl.org optional rather than default?

2008-02-20 Thread Nigel Frankcom
On Wed, 20 Feb 2008 10:59:58 -0500, Chris Santerre <[EMAIL PROTECTED]> wrote: > > >> -Original Message- >> From: Jeff Chan [mailto:[EMAIL PROTECTED] >> Sent: 2008-02-20 07:59 >> To: users@spamassassin.apache.org >> Subject: Re: Time to make multi.uribl.org optional rather >> than default?

Re: Your Industry profile

2008-03-20 Thread Nigel Frankcom
On Thu, 20 Mar 2008 17:18:03 +0530, "Agnello George" <[EMAIL PROTECTED]> wrote: >On 3/20/08, Arvid Ephraim Picciani <[EMAIL PROTECTED]> wrote: >> >> nice. spam on the spamassassin ml. anyone got a rule for those already? :D >> >> On Thursday 20 March 2008 11:13:09 agnello george wrote: >> > Hi, >

Scoring unexpectedly low

2008-03-30 Thread Nigel Frankcom
Hi All, A user received the spam below. The scoring on it seems very low. Does it score consistently for others? If not, what rules is it tagging? Any help gratefully received. >Received: by blue-canoe.org.uk (MTSPro MTSAgent 1.60.20) ; Fri, 28 Mar 2008 >07:06:43 - >for >X-Spam-RBLRepo

Re: how to unsubscribe to this group

2008-04-02 Thread Nigel Frankcom
From the headers of all list emails list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@spamassassin.apache.org oh and for VBounce look at the documentation in your vbou

Re: What is normal period for SA retraining ?

2006-06-15 Thread Nigel Frankcom
On Thu, 15 Jun 2006 13:17:51 -0700, "Harris, Jason \(DIS\)" <[EMAIL PROTECTED]> wrote: >I'm wanting to know many times per year do SA admins have to retrain ? > >Our setup sends mail to SA client for a score, then depending on score >stores a backup of the mail in spam/ham mail folders for late

Re: RE: Various plugins for Windows version?

2006-06-23 Thread Nigel Frankcom
Hi, We use a Win32 mail server that passes mail over to a nix SA box; one thing that's been noted is that win can lock the file on occasion and cause SA to fail. It seems windows file locks have much to answer for. One possible culprit is the index server; this may or may not apply to you. Disabli

Re: RE: RE: Various plugins for Windows version?

2006-06-23 Thread Nigel Frankcom
For all my comments earlier, SA with Razor, Pyzor & DCC work well,; far better since the SA rig was moved to nix. I use CentOS & FC3/4 here. The net results are most agreeable. I hit maybe 1 - 5 FP/FN a week - which is pretty good on the local setup. All things considered I'm most happy. I've jus

Re: razor2 - strange --lint messages

2006-06-25 Thread Nigel Frankcom
Hi, Did you do: 'razor-admin -discover' 'razor-admin -register' After installing razor? KR Nigel On Sun, 25 Jun 2006 10:58:53 +0200, numE <[EMAIL PROTECTED]> wrote: >Hi, > >i installed spamassassin and razor2 via cpan. > >but i get this message, when running "spamassassin --lint" > >--- >[72

Re: Re: razor is not working ...

2006-06-25 Thread Nigel Frankcom
Hi, Did you enable: loadplugin Mail::SpamAssassin::Plugin::Razor2 in your /etc/mail/spamassassin/v310.pre file? KR Nigel On Sun, 25 Jun 2006 09:51:50 -0400, "Screaming Eagle" <[EMAIL PROTECTED]> wrote: >Hmm, I know I installed razor, because I just ran a razor-report. >razor-report -v >Raz

Re: Training Bayes properly

2006-06-29 Thread Nigel Frankcom
On Fri, 30 Jun 2006 09:45:07 +1000, "Leigh Sharpe" <[EMAIL PROTECTED]> wrote: >So it looks like I have to reset my Bayes and re-train it. I want to do >it properly this time. I will be making sure I personally review every >message that our users put into the spam folder first, to make sure they >

Re: modifying log

2006-07-12 Thread Nigel Frankcom
I think you'll need to take those info out of you smtp/MTA logs We do similar here using an AWK script which goes on to tally ham/spam and various other stats. On Tue, 11 Jul 2006 05:38:22 -0700 (PDT), Pezhman Lali <[EMAIL PROTECTED]> wrote: >hi >in my /var/log/maillog, foreach spam checking, th

Re: Re: Why is there so much hype behind Image spam

2006-07-15 Thread Nigel Frankcom
I'd have said the tools were the spammers and the image spams their implements - but that'd just be semantics :-} On Sat, 15 Jul 2006 04:08:51 -0700, "Loren Wilton" <[EMAIL PROTECTED]> wrote: >> marketing.. or should I expect a huge deluge of Image spam this weekend > >Maybe. Who knows. > >Image

Re: spamassassin sql lookup

2006-07-18 Thread Nigel Frankcom
Do you have sql whitelist and user prefs enabled? On Tue, 18 Jul 2006 20:18:12 +0200, "Martin Schiøtz" <[EMAIL PROTECTED]> wrote: >Hi > >I am using spamassassin-3.1.3 with bayes_pg.sql. Everything is working >fine but in maillog it looks like spamassassin is making the bayes >lookup 3 times for e

Re: spamassassin sql lookup

2006-07-18 Thread Nigel Frankcom
Previous message aside, either the user name is wrong or the db for that user is empty On Tue, 18 Jul 2006 20:18:12 +0200, "Martin Schiøtz" <[EMAIL PROTECTED]> wrote: >Hi > >I am using spamassassin-3.1.3 with bayes_pg.sql. Everything is working >fine but in maillog it looks like spamassassin is m

Re: Re: Bayes corrupt?

2006-07-18 Thread Nigel Frankcom
http://spamassassin.apache.org/full/3.0.x/dist/doc/sa-learn.html http://spamassassin.apache.org/full/3.1.x/dist/doc/sa-learn.html On Wed, 19 Jul 2006 05:37:29 + (UTC), martin <[EMAIL PROTECTED]> wrote: >just wonder, how can make sa-learn/spamassassin to unlearn a message? thx > >jdow eart

Re: Re: Bayes corrupt?

2006-07-19 Thread Nigel Frankcom
<[EMAIL PROTECTED]> wrote: >Nigel Frankcom blue-canoe.net> writes: > >> http://spamassassin.apache.org/full/3.0.x/dist/doc/sa-learn.html >> >> http://spamassassin.apache.org/full/3.1.x/dist/doc/sa-learn.html >> >> On Wed, 19 Jul 2006 05:37

Sort of related to Whitelisting abuse and <>

2006-07-20 Thread Nigel Frankcom
Hi, I'm looking at the feasibility of using all_spam_to for my local abuse@ addresses. Since abuse@ is intended as reporting mechanism about local abusers I don't want mail sent to the local abuse addresses scanned/binned by SA. Am I opening myself up to problems? Is there a better way to do i

Re: Delivery failure notification (fwd)

2006-07-21 Thread Nigel Frankcom
They have a nice feedback link :-> http://www.accessintel.com/feedback.htm On Fri, 21 Jul 2006 22:00:52 -0800, John Andersen <[EMAIL PROTECTED]> wrote: >On Friday 21 July 2006 21:42, John D. Hardin wrote: >> On Fri, 21 Jul 2006, John Andersen wrote: >> > On Friday 21 July 2006 18:03, John D. Har

Re: meta rule format

2006-07-24 Thread Nigel Frankcom
On Mon, 24 Jul 2006 19:25:23 +0100, Ben Wylie <[EMAIL PROTECTED]> wrote: >Am running SpamAssassin 3.1.2 on Windows 2003 Server. > >I have written a meta rule and i want it to only hit if it hits the >first rule AND one of the three in brackets. > >This syntax doesn't seem to work as it hits when

Re: DNS timeout and debugging

2006-07-24 Thread Nigel Frankcom
On Mon, 24 Jul 2006 22:12:14 +0100, Ben Wylie <[EMAIL PROTECTED]> wrote: >I am running SpamAssassin 3.1.2 on Windows 2003 Server. > >Is there any way for me to change the DNS timeout period? > >Is there a way for me to increase debugging info on DNSBL tests? >When for some reason, if all DNS tests

Re: spamassasin learn

2006-07-31 Thread Nigel Frankcom
Hi, The sa-learn instruction trains the bayes database; without it bayes will not tag any messages. You need to do the training with at least 200 spam and 200 ham. Be very careful that the messages in each are correct, so no spam in the ham folder. There are options to learn from the mbox format

Re: Re: spamassasin learn

2006-07-31 Thread Nigel Frankcom
on a mail folder containing only spam >is the bayes database going to apply the spam rules learnt globally on >mailboxes. > >Thanks, >Kailash > > >On 7/31/06, Nigel Frankcom <[EMAIL PROTECTED]> wrote: >> Hi, >> >> The sa-learn instruction trains

Re: What changes would you make to stop spam? - United Nations Paper

2006-08-02 Thread Nigel Frankcom
On Wed, 02 Aug 2006 05:37:32 -0700, Marc Perkel <[EMAIL PROTECTED]> wrote: >Why not just eliminate the SMTP protocol for end users and keep SMTP as >a server to server protocol and have users send theit email to the >server by extending POP/IMAP to send email. It created an authenticated >conne

Re: Re: What changes would you make to stop spam? - United Nations Paper

2006-08-02 Thread Nigel Frankcom
On Wed, 02 Aug 2006 05:53:17 -0700, Marc Perkel <[EMAIL PROTECTED]> wrote: > > >Nigel Frankcom wrote: >> On Wed, 02 Aug 2006 05:37:32 -0700, Marc Perkel <[EMAIL PROTECTED]> >> wrote: >> >> >>> Why not just eliminate the SMTP protocol

Re: This list using SORBS?

2006-08-02 Thread Nigel Frankcom
I had a similar problem recently, after 5 years on the same static Business IP it suddenly appeared in SORBS. In true Murphy's law fashion the first I knew of it was about 8PM on a Saturday night, when a message to this list bounced with reference to SORBS. After a few days dickering with my ISP t

sa-update error

2006-08-03 Thread Nigel Frankcom
Hi All, I ran sa-update across several Centos 64 & 32 bit machines here yesterday and today and received the following error... channel: attempt to rm channel pre file failed, attempting to continue anyway at /usr/bin/sa-update line 694 --lint -D shows no errors, just wondering if I should be co

Re: sa-update error

2006-08-03 Thread Nigel Frankcom
On Thu, 3 Aug 2006 10:06:31 -0400, Theo Van Dinter <[EMAIL PROTECTED]> wrote: >On Thu, Aug 03, 2006 at 10:19:44AM +0100, Nigel Frankcom wrote: >> channel: attempt to rm channel pre file failed, attempting to continue >> anyway at /usr/bin/sa-update line 694 >> --li

Allowing IMAP/POP to Send Email & United Nations etc....

2006-08-03 Thread Nigel Frankcom
I'll put on my flameproof underwear for this There's been a huge amount of crossfire on these/this subject, but I don't see how it has anything to do with SA; or am I missing the point? Different protocols, yet another level of policing, but nothing about the fact that SA does a damned fine j

Re: 0451.com

2006-08-05 Thread Nigel Frankcom
On Sat, 05 Aug 2006 14:38:56 +0100, Ben Wylie <[EMAIL PROTECTED]> wrote: >A question for those of you who have large databases of spam and ham to >check, do genuine emails come from the domain 0451.com or whether it is >genuinely just spam? > >I get a lot of spam claiming to be from emails on th

Re: Always add report headers

2006-08-05 Thread Nigel Frankcom
On Sat, 05 Aug 2006 14:08:45 +0200, Arik Raffael Funke <[EMAIL PROTECTED]> wrote: >Hi, > >how to I get spamd/spamc to always add the spamassassin report headers? >I.e. also to ham messages... > >I have the following in my local.cf and user_pref.cf but to no apparent use: > >use_auto_whitelist 0 >

Re: Always add report headers

2006-08-05 Thread Nigel Frankcom
On Sat, 05 Aug 2006 14:08:45 +0200, Arik Raffael Funke <[EMAIL PROTECTED]> wrote: >Hi, > >how to I get spamd/spamc to always add the spamassassin report headers? >I.e. also to ham messages... > >I have the following in my local.cf and user_pref.cf but to no apparent use: > >use_auto_whitelist 0 >

Re: 0451.com

2006-08-07 Thread Nigel Frankcom
On Mon, 7 Aug 2006 08:21:41 +0100, Duncan Hill <[EMAIL PROTECTED]> wrote: >On Monday 07 August 2006 00:02, wrote: >> | 2250 0733.com > >> Here are my numbers from last week: >> >>5006 0451.com >>3845 53.com > >Not seeing anywhere near as high, but this is only on my personal server: >

Re: SA-Update required modules

2006-08-07 Thread Nigel Frankcom
I had similar problems on CentOS 32 & 64; I ended up installing the Net::Ident with yum instead (off the dag repo), that worked ok... yum install perl-Net-Ident.noarch The INET6 can be installed the same way, though I don't think it's critical to have it in. HTH Nigel On Mon, 7 Aug 2006 20:45:

Re: Bayes errors...

2006-08-08 Thread Nigel Frankcom
I'm not sure what you've done there, I didn't realise it was possible to mix collation types in the same table. Have you checked that all tables are the same type? MyISAM or Inno? If they are all the same, I'd be inclined to pull it down, rebuild from the SA supplied SQL and retrain. Did you merge

Re: Bayes errors...

2006-08-08 Thread Nigel Frankcom
On Tue, 08 Aug 2006 12:02:04 +0100, Hamish Marson <[EMAIL PROTECTED]> wrote: >-BEGIN PGP SIGNED MESSAGE- >Hash: SHA1 > >Nigel Frankcom wrote: >> I'm not sure what you've done there, I didn't realise it was >> possible to mix collation types in

Re: Re: Bayes errors...

2006-08-08 Thread Nigel Frankcom
On Tue, 08 Aug 2006 12:08:52 +0100, Hamish Marson <[EMAIL PROTECTED]> wrote: >-BEGIN PGP SIGNED MESSAGE- >Hash: SHA1 > >Nigel Frankcom wrote: >> I'm not sure what you've done there, I didn't realise it was >> possible to mix collation types in

Re: Memory requirements

2006-08-09 Thread Nigel Frankcom
On Wed, 9 Aug 2006 00:52:58 -0700, "jdow" <[EMAIL PROTECTED]> wrote: >From: "James Lay" <[EMAIL PROTECTED]> > >> On Mon, 7 Aug 2006 20:46:05 -0700 >> "jdow" <[EMAIL PROTECTED]> wrote: >> >>> From: "James Lay" <[EMAIL PROTECTED]> >>> >>> > Hey all! >>> > >>> > Anyone happen to know the memory re

Re: Re: Memory requirements

2006-08-09 Thread Nigel Frankcom
On Wed, 9 Aug 2006 01:10:59 -0700, "jdow" <[EMAIL PROTECTED]> wrote: >From: "Nigel Frankcom" <[EMAIL PROTECTED]> > >On Wed, 9 Aug 2006 00:52:58 -0700, "jdow" <[EMAIL PROTECTED]> wrote: > >>From: "James Lay" <[EMAIL PR

Re: 0451.com

2006-08-10 Thread Nigel Frankcom
On Thu, 10 Aug 2006 18:04:06 -0400, Bill Horne <[EMAIL PROTECTED]> wrote: >On Mon, Aug 07, 2006 at 01:29:36PM +0200, Ralf Hildebrandt wrote: >> * Tony Finch <[EMAIL PROTECTED]>: >> >> > All-numeric domains are popular in China because they are easier for >> > people to deal with than alphabetic d

Re: Sa-learn doesn't seem to work

2006-08-11 Thread Nigel Frankcom
On Fri, 11 Aug 2006 11:49:16 +0300, "Halid Faith" <[EMAIL PROTECTED]> wrote: >Hello > >I use spamassassin3.1 with simscan1.2 on qmail. >I want my mailserver to deny some messages which are spam using sa-learn. So I >typed as below; >sa-learn --spam /path/badmails/ > >Learned tokens from 6 message

Re: bayes not run on some mail

2006-08-13 Thread Nigel Frankcom
On Mon, 14 Aug 2006 12:21:16 +0700, Beast <[EMAIL PROTECTED]> wrote: >Hi, > > From some (spam) mail which not caught by SA, it seems that bayes is >not applied to this mail. > >X-Spam-Report: > * 0.0 HTML_MESSAGE BODY: HTML included in message > * 1.7 SARE_SPEC_ROLEX Rolex watch spam >X-S

Re: Re: bayes not run on some mail

2006-08-14 Thread Nigel Frankcom
On Mon, 14 Aug 2006 01:52:33 -0700, "jdow" <[EMAIL PROTECTED]> wrote: >From: "Beast" <[EMAIL PROTECTED]> > >> jdow wrote: >>> From: "Beast" <[EMAIL PROTECTED]> >>> Hi, From some (spam) mail which not caught by SA, it seems that bayes is not applied to this mail. X-Sp

Re: Re: bayes not run on some mail

2006-08-14 Thread Nigel Frankcom
On Mon, 14 Aug 2006 16:28:21 +0700, Beast <[EMAIL PROTECTED]> wrote: >Nigel Frankcom wrote: >> >>>> I will turn on auto leaarn mostly because I need to feed more HAM to SA >>>> (so far I only feed ham for any false positive which is very low daily >&

Re: AW: Problems with ClamAV Plugin

2006-08-29 Thread Nigel Frankcom
On Tue, 29 Aug 2006 13:07:50 +0200, Jürgen Ladstätter <[EMAIL PROTECTED]> wrote: >x-virus header is now shown, but it doesnt drop the file. i think it would >be better, because outlook doesnt show any warning, header isnt rewritten, >file isnt dropped. so its still unsecure :-/ > > > >Mit freundl

Re: AW: Problems with ClamAV Plugin

2006-08-29 Thread Nigel Frankcom
On Tue, 29 Aug 2006 13:07:50 +0200, Jürgen Ladstätter <[EMAIL PROTECTED]> wrote: >x-virus header is now shown, but it doesnt drop the file. i think it would >be better, because outlook doesnt show any warning, header isnt rewritten, >file isnt dropped. so its still unsecure :-/ > > > >Mit freundl

Re: AW: AW: Problems with ClamAV Plugin

2006-08-29 Thread Nigel Frankcom
On Tue, 29 Aug 2006 13:23:47 +0200, Jürgen Ladstätter <[EMAIL PROTECTED]> wrote: >it does the following when it finds a virus: > >} elsif($code eq 'FOUND') { >Mail::SpamAssassin::Plugin::dbg("ClamAV: Detected virus: $virus"); >$header = "Yes ($virus)"; >$isspam = 1; > >so it adds a fla

Re: IO::Socket::INET6 problems

2006-09-01 Thread Nigel Frankcom
On Fri, 01 Sep 2006 12:43:36 +0200, Anders Norrbring <[EMAIL PROTECTED]> wrote: >I'm trying to get IO::Socket::INET6 to install since I actually use >IPv6.. But so far no luck, and I haven't found any cure when Googling >around on the subject either. > >Anyone on the list who can help out? The

Re: Spam levels up or down?

2006-09-02 Thread Nigel Frankcom
On Sat, 02 Sep 2006 02:28:14 -0800, John Andersen <[EMAIL PROTECTED]> wrote: >The Register is running an article saying spam is back up to 81% of all >email traffic due to newer versions of the Mocbot worm. > >If anything, my traffic has been less of late, and almost non-existant >since in install

Re: Spam levels up or down?

2006-09-02 Thread Nigel Frankcom
On Sat, 2 Sep 2006 06:15:28 -0700, "jdow" <[EMAIL PROTECTED]> wrote: >From: "Nigel Frankcom" <[EMAIL PROTECTED]> >On Sat, 02 Sep 2006 02:28:14 -0800, John Andersen <[EMAIL PROTECTED]> >wrote: > >>The Register is running an article saying sp

Re: Spam levels up or down?

2006-09-03 Thread Nigel Frankcom
On Sat, 2 Sep 2006 22:13:28 -0400, David Cary Hart <[EMAIL PROTECTED]> wrote: >On Sat, 02 Sep 2006 02:28:14 -0800, John Andersen ><[EMAIL PROTECTED]> opined: >> The Register is running an article saying spam is back up to 81% of >> all email traffic due to newer versions of the Mocbot worm. >> >>

Re: Re: Spam levels up or down?

2006-09-03 Thread Nigel Frankcom
On Sat, 2 Sep 2006 10:25:40 -0700 (PDT), "John D. Hardin" <[EMAIL PROTECTED]> wrote: >On Sat, 2 Sep 2006, jdow wrote: > >> Hm, I have a suspicion that the spam is being targeted quite >> differently then. Until the end of June I used to get about 250 to >> 300 spams a day. I am down to 90 to 150 p

Re: Spam levels up or down?

2006-09-03 Thread Nigel Frankcom
On Sun, 03 Sep 2006 01:10:25 -0800, John Andersen <[EMAIL PROTECTED]> wrote: >On Sunday 03 September 2006 01:03, Nigel Frankcom wrote: >> On Sat, 2 Sep 2006 10:25:40 -0700 (PDT), "John D. Hardin" >> >> <[EMAIL PROTECTED]> wrote: >> >On Sat,

Re: Spam levels up or down?

2006-09-03 Thread Nigel Frankcom
On Sun, 03 Sep 2006 11:10:14 +0100, [EMAIL PROTECTED] (Justin Mason) wrote: > >John Andersen writes: >> On Sunday 03 September 2006 01:03, Nigel Frankcom wrote: >> > On Sat, 2 Sep 2006 10:25:40 -0700 (PDT), "John D. Hardin" >> > >> > <[EMAIL PRO

Re: Spam levels up or down?

2006-09-03 Thread Nigel Frankcom
On Sun, 3 Sep 2006 04:22:07 -0700, "jdow" <[EMAIL PROTECTED]> wrote: >From: "Nigel Frankcom" <[EMAIL PROTECTED]> >On Sun, 03 Sep 2006 01:10:25 -0800, John Andersen <[EMAIL PROTECTED]> >wrote: > >>On Sunday 03 September 2006 01:03, Nigel Fr

Re: Re: add headers

2006-09-05 Thread Nigel Frankcom
On Tue, 5 Sep 2006 01:18:55 -0700 (PDT), e2rd <[EMAIL PROTECTED]> wrote: > >Hi, > >"report_safe 0" doesn't help. > >I have also: >always_add_headers 1 >spam_level_stars 1 >always_add_report 1 > >Do you have any other idea? > >Best regards, >e2rd > > >John D. Hardin wrote: >> >> On Mon, 4 Sep 2006

Re: Get rid of wrong/outdated manual SA-Rules?

2006-09-06 Thread Nigel Frankcom
On Wed, 06 Sep 2006 11:11:09 +0200, Matthias Haegele <[EMAIL PROTECTED]> wrote: >Hello! > >Accidently (or foolishly) i didnt deactivitate "wrong" rules in config >of RulesDuJour [1]. from site: rulesemporium [2]. >Now i have some rules in my /etc/spamassassin/ not for my SA-Version [3] >namely: t

Re: add headers

2006-09-06 Thread Nigel Frankcom
On Tue, 5 Sep 2006 19:36:17 -0700 (PDT), "John D. Hardin" <[EMAIL PROTECTED]> wrote: >On Tue, 5 Sep 2006, Nigel Frankcom wrote: > >> >John D. Hardin wrote: >> >> >> >> On Mon, 4 Sep 2006, e2rd wrote: >> >> >> &g

Re: import/export bayes database ?

2006-09-15 Thread Nigel Frankcom
On Fri, 15 Sep 2006 10:11:58 +0200, Noc Phibee <[EMAIL PROTECTED]> wrote: >Hi > >i want change my mail server, actually, i use SpamAssassin 3.0.4 >I want put the latest version > >Can i export from old server the bayes database and import it into the new ? > >Thanks bye > > You should be able to

Re: Not all messages passing through SA

2006-09-20 Thread Nigel Frankcom
On Wed, 20 Sep 2006 10:20:18 +0100, [EMAIL PROTECTED] wrote: >I'm using SA 3.1.1 and am calling it from a .procmailrc file as >suggested in http://wiki.apache.org/spamassassin/UsedViaProcmail, the >relevant lines are: > >:0 f >| formail -A"X-Procmail: Before SpamAssassin" > >:0fw: spamassassin.l

Anyon eelse hit errors with the SARE stock rule update?

2006-09-22 Thread Nigel Frankcom
Hi, I got this error today... > >***WARNING***: spamassassin --lint failed. >Rolling configuration files back, not restarting SpamAssassin. >Rollback command is: mv -f /etc/mail/spamassassin/70_sare_stocks.cf >/etc/mail/spamassassin/RulesDuJour/70_sare_stocks.cf.2; mv -f >/etc/mail/spamassassi

  1   2   3   4   >