Re: [SAtalk] bayes works!

At 08:10 PM 11/19/2003, Bryan Hoover wrote: Just wanted to mention that I'd been trying to clean up a polluted ham corpus by using 'forget', but I continued to get poor results. Long story short, I cleaned up my ham, and removed both ham, and spam that had spambouncer headers - which I assume sa-l

RE: [SAtalk] (no subject)

At 03:25 PM 11/19/2003, Robert Oslin wrote: My first post to this list. Hope I'm doing this right... I received a message with invisible fonts, yet the generic HTML_FONT_INVISIBLE rule wasn't hit. Was it because the body tag didn't specify a background font, therefore the text font color had nothi

Re: [SAtalk] Negative score for SAtalk messages

At 02:49 PM 11/19/2003, Marc Steuer wrote: I want to score messages from [SAtalk] with a negative score so examples posted to the list won't be tagged as spam. This is my first venture into regex and I've tried: header MY_SATALKSubject =~ /\[SAtalk\]\b/ describe MY_SATAL

Re: [SAtalk] subject line not being tagged as spam

At 01:46 PM 11/19/2003, Michal Wellum wrote: In 10_misc.cf under /usr/share/spamassassin So, I simply removed the hashes from a couple of lines as follows... Still no joy. The spam being found is not being tagged in the subject line. Any help would be appreciated. 1) I'd strongly advise t

Re: [SAtalk] mysql spamc ignores the email in mailling list

At 06:09 PM 11/19/03 +0800, Patrick T. Tsang wrote: From the maillog, I have checked that spamd has successfully filtered the mail at first. However, spamd only check email using the last email address found in the mailling list and check against the user-defined rules in Mysql. That is, it skips t

Re: [SAtalk] www.no-spam-today.com hmmmm

At 04:54 PM 11/18/2003, Upwood, Jim wrote: If they are using the open source SA, why can't I download the source to their program? The license of SA is not GPL, it's artistic/GPL dual licensing.. There are certain kinds of derived closed-source allowed under the artistic license half, and they ar

Re: [SAtalk] SA and MySQL

At 01:30 PM 11/18/03 -0200, Vitor Renato Alves de Brito wrote: I call spamd with -D option (spamd -D) and call spamc with -u option (spamc -u [EMAIL PROTECTED] < spamfile.msg) but SA does not read preferences from the database. What I am doing wrong? you need to call spamd with -q if you want to us

Re: [SAtalk] SA Check again

At 02:25 PM 11/18/03 +0100, Jim Knuth wrote: Can't locate object method "new" via package "Razor2::Client::Agent" What`s this? Thank you for help. SA 2.60 Razor 2.36 Hints? read the docs that came with SA 2.60.. there's a source code patch for razor that needs to be applied, and is included with

Re: [SAtalk] whitelist_from doesn't work

At 02:36 PM 11/18/03 +0100, Jan Erik Skogsholm wrote: whitelist_from_rcvd [EMAIL PROTECTED] infoland.no We stilll got a lot of spam points from this domain. 1) don't use def_* commands.. those are explicitly there to distinguish the default whitelists from yours. Yours s

Re: [SAtalk] Mailinglist-letter marked as spam every time

At 01:52 PM 11/18/03 +0100, Martin Lyberg wrote: Can i whitelist the subject in some way, because it seems like this is the only thing that is common in every letter. You can do that with a simpleish custom rule and give it a negative score. header LOCAL_MY_LIST_SUBJECT Subject ~=/\bsome subject s

Re: [SAtalk] why won't changing the display language work ???

At 01:12 AM 11/18/03 +0100, Samuel Murez wrote: Hello-- Could somebody please take just a minute to tell me how to do this ? It seems very simple but I've tried many solutions and nothing's working ! I would like one of my users to receive spamassassin template messages in french, while the rest

Re: [SAtalk] Teaching bayes

At 10:33 AM 11/18/03 +, Adam Griffiths wrote: It seems to me that the autolearn feature is too withstrictive as to which mails it chooses to autolearn from, where as my plan would autolean from _all_ the mail I receive, and only require I keep and eye out for any mistakes, and correct them. If

Re: Fw: Undeliverable Mail: [SAtalk] SA-learn per VIRTUAL user

At 12:29 PM 11/14/2003, Marcio Merlone wrote: FYI. Begin forwarded message: Date: Fri, 14 Nov 2003 16:45:05 + From: [EMAIL PROTECTED] FYI, this has been mentioned on the list frequently, and has been going on since 10/29 at least.. Unfortunately the list admins can't track which address is

Re: [SAtalk] Empty Return-Path?

At 12:26 PM 11/14/2003, Charles Gregory wrote: Another spam today, with the infamous empty return path. (Return-Path: <>) But I didn't see any test that was catching this. Is there something legitimate about an empty return path that makes it a bad test? An empty return path is RFC required to be a

Re: [SAtalk] auto learn is ALWAYS no

At 07:32 AM 11/14/03 +0200, Thomas Kinghorn wrote: I am a little confused as to what triggers the autolearn function. For autolearning purposes, a second score for the email is calculated. This score is calculated as if bayes were disabled. ie: bayes rules don't count, and the appropriate non-b

Re: [SAtalk] Sa-learn --ham necessary?

At 05:49 AM 11/14/03 -0500, MIKE YRABEDRA wrote: Is it necessary to have SA bayes learn 'ham' as well as 'spam'? Yes. SA won't even try to use bayes scoring until 200 spam AND 200 ham messages are trained. --- This SF.Net email sponsored by: A

Re: [SAtalk] Run spamd as root ?

At 09:43 AM 11/13/2003, MIKE YRABEDRA wrote: I have found that spamd will not use razor on my system because of permissions. Is it safe to run spamd as root? It's not entirely safe to leave it running as root... if you try, spamd will setuid itself to nobody. You can however start spamd as root a

Re: [SAtalk] help (how to unsubscribe from a sourceforge list 101)

At 10:27 PM 11/12/03 -0500, you wrote: Please remove me from the mailing list... Thanks in advance. Every message posted to the list has the information you need to unsubscribe yourself in the headers... List-Unsubscribe: , Go ther

Re: [SAtalk] Spamassassin blocking by words

At 05:12 PM 11/13/03 +1100, you wrote: Can SA block messages that contain certain words in the /header/body/subject ? Yes.. you can create a custom rule for a given word and assign it a ridiculously high score. Of course, procmail does all that too. One of the benefits of SA is having the flexi

Re: [SAtalk] Spam forward

At 04:34 PM 11/12/2003, Dan wrote: Does anyone know if spam can be forwarded onto another mailbox? Right now I have being trapped in /var/virusmails. That totally depends on what tool you're using to call SA. SA itself can't even trap them in /var/virusmails, much less forward messages. It's the

Re: [SAtalk] OT: Administrivia: List mom, please disable the bouncing thewizard.net subscriber.

At 02:14 PM 11/12/2003, Pedro Sam wrote: I had SA learn it as spam, and it never bothered me again :) Perhaps this is not the proper way of using SA, but it works. Or you can add "comingsoon.pool.com" to your /etc/mail/access file with a 550 rejection :) Received: from mx10.comingsoon.pool.com (

RE: [SAtalk] Attachments

At 03:51 PM 11/12/2003, Colin A. Bartlett wrote: I would think you could write a mime boundries rule like Matt suggests but score it 0 on the site wide config. Then just score it something higher on the individual users config file. Crew, am I wrong here? Good point.. that way you wouldn't need to

Re: [SAtalk] Attachments

At 01:38 PM 11/12/2003, Scott Antonivich wrote: but can attachments be tagged as spam per user? If so, what do I need to place in this users config file? You'd have to create a custom rule to look for mime boundaries.. However, to do it per-user, you'll need to have per-user configs, and per-user

Re: [SAtalk] WhiteList problem

At 12:13 PM 11/12/2003, Kiryl Hakhovich , [EMAIL PROTECTED] wrote: am I missing something here? here is a headers for email that should be going through: --- Received: from mail-gateway.exchange.goodwillny.org ([10.0.1.27]) by winxchnge2-2kab.exchange.goodwillny.org

Re: [SAtalk] Rule is blocking everything

At 12:15 PM 11/12/2003, Dan wrote: Yesterday we were talking about blocking certain words. The suggestion came up to put the following in: body LOCAL_SWEARWORD /\b(?:word1|word2|word3|word4)\b/i I put this in the bottom of my /etc/mail/spamassassin/local.cf It seems to block all mail? Any idea

Re: [SAtalk] RBL dumb question

At 10:23 AM 11/12/03 -0500, Chris Trudeau wrote: How would I go about determining WHICH RBLS are being used currently (I know they are "on"). Look through 20_dnsbl_tests.cf, then check to make sure the RBL in question has a non-zero score in 50_scores.cf.. grep is your friend. And how would I g

Re: [SAtalk] Off topic: Threads

At 07:18 AM 11/12/03 -0500, Terry Milnes wrote: Are the threads on this list screwed up by the list program, or is it just users replying to existing mail to create new? Just wondering, because it seems to be terribly messed up That is a very common thing for people to do who don't use thread

Re: [SAtalk] more spam since installing 2.60

At 07:16 AM 11/12/03 +0200, Thomas Kinghorn wrote: Is anyone else experiencing more junk mail getting through since installing 2.60? No.. I've experienced a lot less getting through, but I use the bayes engine and keep mine well trained. Also, why are some scores in the tests 0.0? Because the sco

Re: [SAtalk] A black listing question

At 01:17 PM 11/11/2003, Peter P. Benac wrote: Is there a legitimate reason not to blacklist email.com? I just seem to get way too much SPAM from email.com. It's a real webmail type service.. So the same arguments that apply for why you should/should not block hotmail, yahoo, eudoramail, and o

Re: [SAtalk] SpamAssassin dont block the default sample spam examples and others

At 01:19 PM 11/11/2003, Joao Pedro wrote: I'm installing a Spam Gateway Email Server in a FreeBSD server with Postfix+Amavisd+SpamAssassin and a followed this howto http://lawmonkey.org/anti-spam.html. All it's appear ok, but when I send a email with the sample_spam.txt or other spam example file t

Re: [SAtalk] Re: Abused redirector URLs ?

At 11:47 AM 11/11/2003, Lukreme wrote: Quick (stupid) question. What is the best place to add rules where they will not get "blown away" via an upgrade? Right out of the rule-writing guide, section 1.2: /etc/mail/spamassassin/local.cf is the place of choice for site-wide application

Re: [SAtalk] Filtering.

At 12:31 PM 11/11/2003, Rajdeep Larha wrote: I have successfully installed the SA. but I am not able to filer the content. Any stuff which I want to filter in there in the rules directory but not getting filter. Um what do you mean by "Any stuff which I want to filter in there in the rules direc

Re: [SAtalk] [MailServer Notification]To recipient: Message matched eManager setting and action was taken.

At 03:45 AM 11/11/2003, David B Funk wrote: On Mon, 10 Nov 2003 [EMAIL PROTECTED] wrote: > eManager Notification * > > The following mail was blocked since it contains sensitive content. Love the stupid -PC- double-talk here. Gee, what was the content sensitive to?

Re: [SAtalk] new to spamassassin

At 12:58 PM 11/11/2003, Dan wrote: 1. I know spamassassin works on a point system, but does it learn as time goes by? IF you use the bayes subsystem, which is on by default but untrained as well, SA will engage in some automatic learning for the bayes rules. The remaining rules are static ones, a

RE: [SAtalk] What Dynamic IPs rbl list?

At 11:00 AM 11/11/2003, Bill wrote: Bad, bad, bad idea!!! There are many many people running home networks in dynamic space who send their mail thru their isp server. These will all get caught and trashed by your plan. You better have a VERY good explanation why you just alienated hundreds of curr

Re: [SAtalk] html mails getting through

At 04:56 AM 11/11/2003, Thomas Kinghorn wrote: I have attached a spam i keep getting, no, you've quoted it in text-only form without all the headers... All I can tell from what you posted is it's using bayes poison.. There's no way from that little snippet to see what rules the email matched. Fo

Re: [SAtalk] What Dynamic IPs rbl list?

At 09:30 AM 11/11/2003, Marcio Merlone wrote: I was wondering what rbl lists you guys use to block dynamic IP ranges. I will use it on a gateway relay-only server, which makes anti-virus and anti-spam and then forwards messages to end server. It's a postfix box. dynablock seems to work pretty well

Re: [SAtalk] ok_locales

At 06:07 AM 11/11/2003, Sergey V. Baldin wrote: How to activate localization: "ok_locales on|off"? It's not an on/off thing, you need to pick a list of locales that are ok.. The current list of locales is: en - Western character sets in general ja - Japanese character set

RE: [SAtalk] New Obfuscation Technique?

At 03:00 PM 11/10/2003, Chris Santerre wrote: This is the spammer trick of saying the email is from you, to you. So it got Whitelisted. No it did not Chris.. Read The Fine List of rules it matched.. no WHITELIST_* or AWL rules match this. X-Spam-Tests: tests=BANG_MORE,BAYES_60,HTML_FONTCOLOR_RED

Re: [SAtalk] unable to disable AWL

At 09:47 AM 11/10/2003, matthias zeichmann wrote: is it possible that this messes up other behaviour of SA? That type of error is unlikely to cause problems with other lines, but it is possible. Usually the ones that kill half your local.cf are missing terminators for regexes. -

Re: [SAtalk] spam threshold value?

At 04:14 PM 11/10/2003, you wrote: What's the lowest spam threshold value you are managing to get away with (without false positives) ? There's always FP's at pretty much any threshold that's no absurdly high (ie, 1.0). However, I have yet to notice any significant amount of FP's at 5.0.. Oc

Re: [SAtalk] Looking for Rules

At 04:36 PM 11/10/2003, Bob Rosenberg wrote: I have a number of gripes about this. 1) I only get 5 points not 5.1 when I add them together. One word.. rounding.. The report only displays the rule score down to the nearest tenth of a point, however the rules are scored down further in precision

Re: [SAtalk] unable to disable AWL

At 11:02 AM 11/10/03 +0100, matthias zeichmann wrote: Meanwhile i suspect an error in my configuration. Is there a way to check your local.cf for validity? spamassassin --lint --- This SF.Net email sponsored by: ApacheCon 2003, 16-19 Novembe

Re: [SAtalk] scoring system and values...

At 04:25 PM 11/7/2003, maarten van den Berg wrote: Upon looking at those rules I see al LOT of inconsistencies. For instance, I found these rules that have score of zero(!) (and these are merely the top of a large iceberg) score CASHCASHCASH 0 score ADDRESSES_ON_CD 0 score BLANK_LINES_90_100 0 scor

Re: [SAtalk] SpamAssassin not labeling as spam but debug labels as spam

At 02:16 PM 11/7/2003, Jennifer Fountain wrote: am using an internal RBL list. When I test a header that is in the list using the following command: /usr/bin/spamassassin -t --prefs-file=/var/qmail/.spamassassin/user_prefs -D < /home/tmp/spam_test.txt, it labels it as spam. However, when an ema

Re: [SAtalk] Newbie Questions

At 01:13 PM 11/7/2003, Chip Paswater wrote: Hey Guys, I apologize if these questions are asked somewhere, but I did browse the FAQ and documentation and didn't see an answer. I have a good understanding of Razor v2, but I just started using SA. 1. When reporting spam via spamassassin -r, can I s

Re: [SAtalk] Delete spam mails

At 12:09 PM 11/7/2003, Roberto Salazar wrote: I have Spamassasin with Postfix working . This server is a Gateway for others internal mail servers (in these are the users accounts). I need that spamassasin erase spam mails directly (DELETE FILTER ) in my server gateway and don't send mail to users

Re: [SAtalk] scoring system and values...

At 10:29 AM 11/7/2003, Maarten J H van den Berg wrote: Sorry if this has been discussed in the past... It's been discussed many times.. It's very common for people to have a very deep misunderstanding of how SA scoring works. Most people fall into the trap of over-simplifying the problem, and si

Re: [SAtalk] MAPS RBL+ in Spam Assassin

At 08:51 AM 11/7/03 -0500, you wrote: I am new to Spam Assassin. I see that it checks e-mail against the MAPS databases, but that it does not appear to check the RBL+ database. Is there some way for me to add this check to the list? Well, SA does NOT check maps by default.. it's just got support

Re: [SAtalk] Razor slows down SA

At 08:38 AM 11/7/03 -0500, you wrote: I have noticed that RAzor2 is timing out and slowing down SA 2.6. Has something changed in the past few months that may have caused this? Maybe the razorzone has changed? I use razor2.cloudmark.com now. I don't think the zone itself is likely to change anytime

Re: [SAtalk] ok to filter on this?

At 11:44 AM 11/6/2003, Jeff Lasman wrote: My question is simply is this okay to filter on? Or does anyone have any experience of any legitimate email coming with this? Lots of legitimate HTML newsletters come with this. It's pretty much a standard thing to do.

Re: [SAtalk] Strange behavior of SpamAssassin + CommuniGate

At 11:42 AM 11/6/03 +0100, Euro Cocolo wrote: recently I've noticed this fault: when my MTA receives mail identified as spam (score > 7.0) from a specific external distribution list, SA tags the message, and instead of discarding the message (as set by the CommuniGate rule), it delivers it to th

RE: [SAtalk] Best Blacklists

At 11:23 AM 11/5/2003, Tom Meunier wrote: Matt, thanks for this. It's a great resource. However, I'm wondering why the following were scored as zero and thus don't have numbers to support their efficacy or lack thereof: 0.000 0. 0.0.500 0.110.00 RCVD_IN_SORBS_BLOCK 0.00

Re: [SAtalk] Are these blacklists widely used, anywhere?

At 08:57 PM 11/5/2003, Nigel Featherston wrote: I would like to know if SpamAssassin uses the following blacklists: rhsbl.ahbl.org dnsbl.ahbl.org And I would also like to know under what conditions they are enabled (i.e. by default, etc.) No they are not used by default, and there's no built-in ru

Re: [SAtalk] (not) up to date SpamAssassin

At 07:16 PM 11/5/2003, Lukreme wrote: My spam assassin is still 2.60-rc6: X-Spam-Status: No, hits=-4.8 required=5.0 tests=BAYES_00,CLICK_BELOW autolearn=ham version=2.60-rc6 So Going to write /home/kreme/.cpan/Metadata Mail::SpamAssassin is up to date. cpan> color me confused CPAN thinks o

Re: [SAtalk] Perhaps this is obvious... but...

At 06:52 PM 11/5/2003, Robert Leonard III wrote: Do I need to restart SpamD every time I make a modification or add a new .cf file to my configuration? Yes, SA only parses the .cf files when it first starts up. Only user_prefs is parsed each time a message comes in. If so, when I do a restart, w

Re: [SAtalk] Can't get add_header to work in 2.60

At 06:36 PM 11/4/2003, Dennis Duval wrote: I have tried to use the add_header feature in /etc/mail/spamassassin/local.cf with no luck. It does not write the added header at all. However the local.cf file is being processed, because I can change required_hits and it has an effect. This is the con

Re: [SAtalk] THIRD request: Someone please help with AWL oddness

At 04:26 PM 11/4/2003, Jay Levitt wrote: - Original Message - From: "Jay Levitt" <[EMAIL PROTECTED]> To: "Jay Levitt" <[EMAIL PROTECTED]> Sent: Sunday, November 02, 2003 9:29 AM Subject: Second request: AWL false hits > Hi.. does anyone have any ideas on this? I have read the FAQ, and thi

Re: [SAtalk] Can you customize the body of a spam message

At 03:10 PM 11/4/2003, Paul Hirschorn wrote: I want to customize the following: Spam detection software, running on the system "SPAMGW.FILTER.COM", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or block si

Re: [SAtalk] Best Blacklists

At 02:55 PM 11/4/2003, Steve Heggood wrote: Could someone recommend a set of blaclists used in sendmail.mc that are producing good results? Might I suggest looking at the STATISTICS-set1.txt that comes with SA? This will give you the results of testing against 343k spam messages and 151k nonspam

Re: [SAtalk] Could not create INET socket... ...Permission denied

At 02:00 PM 11/4/2003, JC wrote: Spamassassin seems to be running fine, except when I go into debug mode, I get an error. Here is some relevant output: [EMAIL PROTECTED] /]$ spamd -c -a -m5 -H -D spamd needs to be started as root, unless you pass it -p to specify a port number > 1024.. by defaul

Re: [SAtalk] Curious about a header.

At 11:44 AM 11/4/2003, Matthew Thomas wrote: It didn't get marked as spam since it appears to come from us, though the IP address is located in Puerto Rico. I was just wondering how they get biocontrolsys.com associated with their IP address. Is it a completely manufactured (not "real") header?

Re: [SAtalk] which folder?

At 07:57 PM 11/4/03 +0100, Jim Knuth wrote: which folder to the read the config is used? local.cf in /etc/mail/spamassassin or local.cf in /etc/spamassassin or user_prefs in /.spamassassin/ It's actually parsed from two places: *.cf in /etc/mail spamassassin user_prefs in ~/.spamassassin And note

Re: [SAtalk] Am I nuts

At 04:14 PM 11/3/03 -0600, Chris Barnes wrote: Background: I had SpamAssassin 2.60 running just fine (using sendmail). I was calling spamd via the /etc/procmail. After installing Mailscanner and ClamAV, I noticed that the original SA conf file was being ignored in favor of the smaller version in th

Re: [SAtalk] tests not updated on the SA website?

At 06:10 PM 11/3/03 -0800, Mairhtin O'Feannag wrote: The "tests" page of the spamassassin.org website seems not to be too up-to-date. A search of the page reveals only three or four tests based upon the word "outlook" and they all refer to Outlook Express. YET ... when I get a message in as sp

Re: [SAtalk] [RD] Meta rules vs. SA version

At 01:50 PM 11/3/2003, Chris Santerre wrote: I'm not sure if it is just me, but there are some new rules I have in the update that look like this: (__meta1 + __meta2) > 1 They don't work on older version of SA. they get an error when doing a spamassassin -D --lint. The '+' is throwing it off. I wo

RE: [SAtalk] RCVD_IN_DYNABLOCK FP?

At 11:35 AM 11/3/2003, Brian Sneddon wrote: I'm running SpamAssassin 2.60 on a public IP (not NATed) and none of the -notfirsthop rules (including RCVD_IN_DYNABLOCK) have worked correctly for me, either. For reference I'm also running Sendmail and Spamass-milter 0.2.0. Here are the headers from a

Re: [SAtalk] trying to tweak SA

At 11:28 AM 11/3/2003, Anne Ramey wrote: I'm trying to add local rules, but only one of the .cf files in /etc/mail/spamassassin seems to be used. Can you only have one extra .cf file? (I'm using amavis with SA, so I was told the extra rules can't go in local.cf). SA should use _every_ file tha

Re: [SAtalk] RCVD_IN_DYNABLOCK FP?

At 02:57 AM 11/3/2003, Justin Mason wrote: Pedro Sam writes: >I'm just wondering why RCVD_IN_DYNABLOCK was a hit, when I sent a email from >my localhost 192.168.2.125 with kmail using the SMTP server at >mail.student.cs.uwaterloo.ca to address [EMAIL PROTECTED] > >This is the proper way of sending

Re: [SAtalk] using spamd/spamc to reject SMTP connection

look at spamass-milter or a similar milter-level plugin to sendmail. They can generally be configured to issue a 5xx level error at the end of the SMTP DATA phase if the SA score is over some threshold level. At 02:30 PM 10/31/2003, Josiah DeWitt wrote: I just installed SpamAssassin and got it w

Re: [SAtalk] Log Question...

At 11:18 AM 10/31/2003, Dan Tappin wrote: Below is a snippet from a recent post to the list: > Oct 30 14:12:40 ns1 MailScanner[3201]: Is there a config option to have these triggered rules logged like that? My maillog simply has mail identified or not identified as spam. It would be great to

Re: [SAtalk] AWL

At 08:13 PM 10/30/03 -0800, Jeremy Hein wrote: I added use_auto_whitelist 0 to /etc/mail/spamassassin/local.cf but it still subtracts AWL in my report. Maybe I'm writing to the wrong config file? How do I find out where the right one is and how do I find out if spamassassin is using that option. 1)

Re: [SAtalk] AWL

At 08:00 PM 10/30/2003, Jeremy Hein wrote: Hi, Does anyone know what this is and how to configure it? It seems to be subtracting from the score different amounts each time. I can't figure out why or what to do about it. Read the FAQ.. the AWL is a score averager, and it's supposed to vary in scor

Re: [SAtalk] Checking HTML garbage

At 07:56 PM 10/30/2003, Jeremy Hein wrote: Is there anyway to have spamassasin check for this kind of HTML garbage. If so, I could get rid of nearly all my spam. it already does catch some of these things. check out the OBFUSCATING_COMMENT rule. However, those rules look for a HTML comment in

Re: [SAtalk] How filter ...

At 10:23 AM 10/30/2003, Andrea Riela wrote: Hi folks, How could I filter this type of spam: Penis P.enis Pe.nis Pen.is Peni.s This regex should work for a custom rule to match those patterns. /P(\.?)e(\.?)n(\.?)i(\.?)s/ You'll probably want to make it a bit more useful like this:

Re: [SAtalk] Autowhitelist

At 10:33 AM 10/30/2003, Segree, Gareth wrote: Addresses from my mail domain is being saved in the auto-whitelist file. 1) How do I prevent addresses from being auto-whitelisted? you don't, unless you disable the AWL entirely. 2) How do I delete addresses that are already auto-whitelisted? spamassa

Re: [SAtalk] outlook corpus?

At 07:17 AM 10/30/03 -0500, Colin A. Bartlett wrote: I've mined Google and the archives. I've found some references to converting Outlook files to mbox format. That would work I believe except that the messages I want are really attached to those in my Outlook. Anyone know of a tool or method of g

Re: [SAtalk] File of mail for sa-learn

At 01:58 PM 10/30/03 +, you wrote: What is the format of the files of ham/spam fed to sa-learn? Can I use Outlook .pst files? You can't directly use the outlook .pst format with sa-learn.. sa-learn supports 2 file formats: The default is single-message per file in RFC 822 format, or a direc

RE: [SAtalk] Spamassassin not rewriting the e-mail subject.

At 08:48 PM 10/29/2003, Riley J. McIntire wrote: [EMAIL PROTECTED] /usr/ports 526$ ps auwx |grep [s]pamd nospam 184 0.0 1.3 21236 20920 ?? Is 20Oct03 3:51.50 /usr/local/bin/spamd -a -c -d -u nospam -H (perl5.00503) Is the -H parameter passed to spamd with no parameter? or is it just being

RE: [SAtalk] Spamassassin not rewriting the e-mail subject.

At 07:28 PM 10/29/2003, Riley J. McIntire wrote: [EMAIL PROTECTED] /usr/local/etc/mail/spamassassin 578$ ps ax |grep [s]pamc 38938 ?? S 0:00.00 /usr/local/bin/spamc So if I'm not badly mistaken I am using spamc. But not the right way? Is there a problem with the procmailrc? That procmailrc l

Re: [SAtalk] "Failed to run BAYES_NN SpamAssassin test, skipping" problems

At 05:23 PM 10/29/2003, Greg Earle wrote: I've run "truss" on the running "spamd" and I'm not seeing anything in the truss output that points to where it's looking for the ndbm file that it doesn't like. The only lines that are relevant to Bayes-named files are: 18263: open("//.spamassassin/bayes

Re: [SAtalk] Rule for looking at envelope sender?

At 03:40 PM 10/29/2003, David Hubbard wrote: How can one look at the envelope sender of a message in a rule? Is there a variable available to SA for that? That's fundamentally impossible in SpamAssassin.. SA isn't provided the envelope. The only way SA can know about the envelope is if you have

Re: [SAtalk] grouping rules

At 03:02 PM 10/29/2003, Joe wrote: Hi, Is there a way to group rules together for only certain instances? For example, I want score the porn rules higher on a certain domain.. so I guess I would need something like header DOMAIN From =~ /filtereddomain.com/i But is there a way I could then do s

Re: [SAtalk] [RD] Open source is Naughty!!!

At 01:53 PM 10/29/2003, Chris Santerre wrote: SUBJECT_XXX and in it, it has naughty words. One of which it looks for is : /pen.s/i Rather than do the ^oO thing, why not modify your . to exclude spaces: /pen\Ss/ This will look for a "non whitespace" in that spot. I'd also suggest putting a \b at

Re: [SAtalk] Broken Rule

At 01:02 PM 10/29/2003, you wrote: Sorry Im a newbie. I have attached my local.cf and my 20_compensate rule. Thanks again. (I have no custom rules) Well, you do have some attempts in there at making a custom rule.. and a very, very, very broken one. I'd delete the entire "Penis" rule you've got i

Re: [SAtalk] Broken Rule

At 11:36 AM 10/29/2003, Tobin wrote: I was wondering if anyone could help me fix a broken rule. Im getting a error "Failed to compile body spamassassin tests, skipping: (syntax error at /ect/mail/spamassassin/local.cf, rule Porn, line 1, near "/) Well, what's the broken rule look like? Can't exact

Re: [SAtalk] wierd erroors

At 03:56 PM 10/29/03 +, you wrote: Since I upgraded I get mail from cron with numerous errors of this form in it. Insecure dependency in link while running with -T switch at /usr/share/perl5/Mail/SpamAssassin/NoMailAudit.pm line 452, line 136. Razor requires a source-code patch to work with S

Re: [SAtalk] ISPS READ THIS: scanning outbound mail gotcha (fwd)

Dynablock should only be used to check the IP address delivering the email. Also of note to ISPs, SA users everywhere: If the machine you run SA on has a NATed or otherwise non-routable IP address (ie: 10.*.*.*, 192.168.*.*, etc) then you must manually set the trusted_relays in your local.cf. O

Re: [SAtalk] Spamassassin not rewriting the e-mail subject.

At 09:15 AM 10/29/03 -0500, you wrote: Hi everyone, required_hits 8.0 rewrite_subject 1 fold_headers 1 report_header 1 use_terse_report 1 defang_mime 1 dns_available no dcc_add_header 1 use_dcc 1 One thing I can spot right away is that you need to remove the defang_mime statement from your local

Re: [SAtalk] white lists

At 06:34 PM 10/28/2003, Jack Gostl wrote: Is it possible to use wild cards in a white list? For example: whitelist_from abcd*.bigcompany.com Yes, See the Mail::SpamAssassin::Conf manpage for details. Basically it should support any wildcards that a typical unix shell supports when doing

Re: [SAtalk] SPAMASSASSIN on Solaris9

At 03:41 PM 10/28/2003, Dominique Bagnato wrote: Thank you to let me know how to install spamassassin on Solaris 9. and where could I get the download ? www.spamassassin.org provided you've got perl 5.6.x or higher, you should be able to install as per the documentation perl Makefile.pl

RE: [SAtalk] White & black lists on server

At 02:57 PM 10/28/2003, Howard Brazee wrote: one word: SSH. Ssh? I'm too loud? I bet this means something.I haven't worked with non-mainframe servers ever. It took me a while to figure out how to use Ultra-Edit to edit my user_prefs file. SSH is Secure SHell, a remote login protocol.. i

RE: [SAtalk] White & black lists on server

At 02:23 PM 10/28/2003, Howard Brazee wrote: A lot of these documents and replies seem to be designed around me having SpamAssassin on my computer. Instead it is on my e-mail server. Is there a place to look at to find out how someone who has a server based SpamAssassin can modify the whitelis

Re: [SAtalk] White & black lists on server

At 01:07 PM 10/28/2003, Howard Brazee wrote: I pulled out ultra-edit and FTP'd in auto-whitelist.pag & auto-whitelist.dir These aren't text files. Where & how can I find and edit my white lists and black lists on my e-mail server? First, those are the auto whitelist, aka AWL.. those files are

Re: [SAtalk] Need help with configuration....

At 01:13 PM 10/28/2003, Darryl Snover wrote: >spamassassin --lint This command results in the following: Cannot open /usr/share/spamassassin/user_prefs.template: No such file or directory Failed to create default user preference file /private/var/root/.spamassassin/user_prefs That's pretty mu

Re: [SAtalk] Need help with configuration....

At 12:06 PM 10/28/2003, Darryl Snover wrote: I've attempted to issue the command: spamassassin -t spam.out without apparent success, as the cursor just sits there afterwards, and nothing is returned. First run this to make sure SA is OK with your configfiles: spamassassin --lint That should

Re: [SAtalk] SpamAss is tagging my own emails

At 01:14 PM 10/27/2003, Mad Martian wrote: FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers [Any idea why this happens? The person who placed the order has a yahoo email address. Is there risk in eliminating this score?] This rule fires off anytime an email has a From: addr

RE: [SAtalk] Newbie

At 10:08 AM 10/27/2003, Dan Kohn wrote: This should be a FAQ: Q. How do I get SpamAssassin to mark as spam all Window patch emails that include an executable? A. Add the following line to your user-prefs (normally ~/.spamassassin/user_prefs): score MICROSOFT_EXECUTABLE 10 - dan And it

Re: [SAtalk] Totally whitelisting someone?

At 04:56 PM 10/25/03 +0100, Paul Hutchings wrote: I've ran "spamassassin --add-addr-to-whitelist" and it is reducing the scores, but the GTUBE test has such a high score that the adjustment doesn't seem to be enough! I hope that makes sense, TIA for any advice! 1) this issue should be fixed in 2.

Re: [SAtalk] Whitelist / Rule Question...

At 01:34 PM 10/24/2003, Dan Tappin wrote: rawbody USERNAME /username/i describe USERNAME score USERNAME -100.0 ... where the person sending e-mail is [EMAIL PROTECTED] Um... does "username" appear in the body part of the message? Note that "rawbody" does not include the headers. You probably want

<    1   2   3   4   5   6   7   8   9   10   >