Re: executing spamassassin at remote host?

2005-10-17 Thread Matt Kettler
At 11:58 PM 10/16/2005, Monty Ree wrote: Hello, all. I have used well spamassassin at my local mailserver. But spamassassin can work at same mailserver using procmail. It definitely doesn't have to work on the same mailserver as your procmail. Mine doesn't. I'd suggest that a very large nu

AWL maintenance...

2005-10-17 Thread Gary W. Smith
Title: AWL maintenance... I just though I’d share this with everyone.  I noticed that our backend MySQL data instance was running a little slow recently with more of a load on it.  This instance is shared between 4 front end servers so I figured maybe we were getting a little more of a load

Re: Relative Kill Scores, 2.63 to 3.1?

2005-10-17 Thread Michael Monnerie
On Montag, 17. Oktober 2005 16:52 Spam Admin wrote: > So, to temporarily resolve this, I bumped our kill_level to 5.9 and > am monitoring it; my false positives have pretty much disappeared. Of > course, I've seen a *slight* increase in fasle negatives versus 2.63, > so I'll be tuning. I use 5.0 (

Re: adult language rules

2005-10-17 Thread Matt Kettler
Hancock, Scott wrote: > Are there any other rules similar to > > http://www.rulesemporium.com/rules/70_sare_adult.cf > > This rule (on my system anyway) will only find f in subject but not > f'ed. So for instance "f'ed in the a" for a subject is not scored. > > I don't trust myself to write

RE: sa-learn

2005-10-17 Thread Bowie Bailey
From: Craig McLean [mailto:[EMAIL PROTECTED] > > In addition to all the good responses you've had I would add that if > you keep the spam after learning, as I do (in case the bayes DB get > killed) then it can sometimes take a while for sa-learn to finish, > even though it will skip messages it ha

adult language rules

2005-10-17 Thread Hancock, Scott
Are there any other rules similar to http://www.rulesemporium.com/rules/70_sare_adult.cf This rule (on my system anyway) will only find f in subject but not f'ed. So for instance "f'ed in the a" for a subject is not scored. I don't trust myself to write regex's but I will if that is my only

Re: sa-learn

2005-10-17 Thread Craig McLean
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 M.Lewis wrote: > > Is there a best practices recommendation for how often to run sa-learn ? In addition to all the good responses you've had I would add that if you keep the spam after learning, as I do (in case the bayes DB get killed) then it can so

Server Wide Tagging of Very High Scoring Spam

2005-10-17 Thread Daniel W
I'm looking to be able to do a system such as follows: local.cf (global spam settings) === required_hits 100 rewrite_subject 1 subject_tag [DEFINITE_SPAM] body ANG_KILL_RULE_FALSE_VIRUS_SCANNER /\+\+\+ Attachment: No Virus found/ describe ANG_KILL_RULE_FALSE_VIRUS_SCA

RE: Relative Kill Scores, 2.63 to 3.1?

2005-10-17 Thread Bowie Bailey
From: Spam Admin [mailto:[EMAIL PROTECTED] > > Last week I upgraded our system from SA v2.63 to v3.1; I am > pleased at how well the process went. However, I immediately > began to see a lot of false positives. Primarily, it seems > that v3.1 has increased the BAYES_00 from -4 to -2.599, and >

Re: Relative Kill Scores, 2.63 to 3.1?

2005-10-17 Thread Matt Kettler
Spam Admin wrote: > I've been running SA as our main inbound SMTP gateway in front of our > GroupWise system for about 18 months now. I process, filter, and quarantine > for the whole enterprise and do not offer individual user control. I use > postfix, amavisd, SA w/ Bayes, RDJ, Razor, some min

Relative Kill Scores, 2.63 to 3.1?

2005-10-17 Thread Spam Admin
I've been running SA as our main inbound SMTP gateway in front of our GroupWise system for about 18 months now. I process, filter, and quarantine for the whole enterprise and do not offer individual user control. I use postfix, amavisd, SA w/ Bayes, RDJ, Razor, some minimal SMTP-level RBLs, CA

Re: reversing encapsulation

2005-10-17 Thread Matt Kettler
At 02:51 AM 10/17/2005, Michael Hrivnak wrote: My install of SA 3.1.0 uses the option to encapsulate identified spam as an attachment. I keep all of these messages for future bayes purposes, and I'd like to be able to extract the encapsulated messages. Specifically, I'd like to allow other baye

Re: Is this really eBay?

2005-10-17 Thread Michael Monnerie
On Samstag, 8. Oktober 2005 12:51 Anders Norrbring wrote: > > http://zmi.at/x/ebay.txt > Nope. It's a scam, all eBay e-mails originates from ebay.com > ebay.co.uk ebay.de etc... > The e-mail you copied originates from easynet.de Then why isn't the "spoofed eBay" rule hitting? It should be improve