[SAtalk] Rules for word-jumble spam
I came up with a set of rules which appear to catch the new strain of spam with a meaningless jumble of words in the body, while hope- fully not catching any legitimate mail. See below; comments welcome, and (naturally) everyone is free to use these rules if you want to. Regarding my body rule (__MPOP_HTML1): The first line of text in the message body, before the graphic and the nonsense text, is broken up by meaningless HTML end tags. For example, a line in a recent spam that showed up as "Free Cable_ TV" looked like this in the raw HTML: Free Cable_ TV Rich Wales[EMAIL PROTECTED]http://www.richw.org header __MPOP_MAILER X-Mailer =~ /mPOP Web-Mail 2\.19/ header __MPOP_SUBJ1Subject =~ /Re: [A-Z]+, \S+ \S+ \S+/ header __MPOP_SUBJ2Subject =~ /Re: \%RND_UC_CHAR\[2-8\], \S+ \S+ \S+/ rawbody __MPOP_HTML1/\w+<\/\w+>\w+/ metaMPOP_SPAM (__MPOP_MAILER && (__MPOP_SUBJ1 || __MPOP_SUBJ2) && __MPOP_HTML1) describe MPOP_SPAM Spam from mPOP Web-Mail score MPOP_SPAM 10.0 --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
[SAtalk] sa-learn --rebuild for all users
I'm an administrator of a spamassassin-enabled server with 250 users. I'm upgrading from 2.55 -> 2.61 and, as suggested in the INSTALL doc, want to use "sa-learn --import" and "sa-learn --rebuild" to update the DB_File Bayes files for every user on the system. Each user's files are stored in: /home/username/.spamassassin/ 1. Is it possible to run sa-learn to update all DBs en masse? 2. Or should I simply upgrade to 2.61 and ignore the --import and -- rebuild instructions. I assume this will delete all user's Bayes DB files. If you help me I THANK YOU, Quinn --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
Re: [SAtalk] Trying to filter the blue pills beginning with V
At Sat Jan 10 09:39:39 2004, Kai Poppe/Redaktion SDCE wrote: > > Hello List > (hope that message gets through the list filter anyways *g*) > > I tried to create a rule to filter occurences of the word for the blue > little pills beginning with V, that contained unsual letters for i and a > (like ã,å,ï aso...) but unfortunately only the word containing "normal" > letters is recognized, the others not. > I inserted the letters into the .cf using MC on my linux-bash. do i need to > use another /\b(?:windows)\*argh\*\b/i editor ? I did it by using the hex equivalent (though this was to catch lower-case i with an acute accent in the word "penis"): body L_OBFU_PENIS /\b[Pp]en\xEDs\b/ You may need to play with the "od" command to find out what the hex (or octal) values are that you need. The examples you give turn out to be \xE3, \xE5, \xEF. Martin -- Martin Radford | "Only wimps use tape backup: _real_ [EMAIL PROTECTED] | men just upload their important stuff -o) Registered Linux user #9257 | on ftp and let the rest of the world /\\ - see http://counter.li.org | mirror it ;)" - Linus Torvalds _\_V --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
Re: [SAtalk] spamc and maildrop
> I rummaged around the web site looking for material on invoking spamc with > maildrop, but didn't find anything. > Can someone point me to any documentation on this, or just give me a clue as > to what must be done in .mailfilter to invoke spamc? xfilter "spamc" same thing you'd use for invoking spamassassin or any other kind of filter. If you have virtual users, you'll need to look at the AuthCourier.pm module submitted to the courier-users mailing list. It makes spamd work with courier's authdaemon and properly handles homedirs for users. -- Chris Petersen Programmer / Web Designer Silicon Mechanics: http://www.siliconmechanics.com/ Blade Servers: http://www.siliconmechanics.com/c292/blade-server.php 1U Servers: http://www.siliconmechanics.com/c272/1u-server.php --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
[SAtalk] Re: OT: My REALY REALY Crazy idea!! ahahahahahah
From: Chris Santerre [mailto:[EMAIL PROTECTED] > Good way to get people to feed spam into bayes! > > People would be walking around asking each other, "How's your > monkey today?" If your monkey had been bad, do you have to spank it? I'm sorry. I just couldn't help myself. -- + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Chris Barnes AOL IM: CNBarnes [EMAIL PROTECTED]Yahoo IM: chrisnbarnes Computer Systems Manager ph: 979-845-7801 Department of Physics fax: 979-845-2590 Texas A&M University --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
[SAtalk] Bayes database expiry running forever?
Hi, something seems to be wrong with my bayes db, or is this considered 'normal'? Log: debug: Score set 0 chosen. debug: running in taint mode? yes debug: Running in taint mode, removing unsafe env vars, and resetting PATH debug: PATH included '/opt/perl/bin', keeping. debug: PATH included '/bin', keeping. debug: PATH included '/sbin', keeping. debug: PATH included '/usr/bin', keeping. debug: PATH included '/usr/sbin', keeping. debug: PATH included '/usr/local/bin', keeping. debug: PATH included '/usr/local/sbin', keeping. debug: PATH included '/usr/bin/X11', keeping. debug: PATH included '/usr/X11R6/bin', keeping. debug: PATH included '/root/bin', keeping. debug: Final PATH set to: /opt/perl/bin:/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sb in:/usr/bin/X11:/usr/X11R6/bin:/root/bin debug: using "/opt/perl/share/spamassassin" for default rules dir debug: using "/etc/opt/mail/spamassassin" for site rules dir debug: using "/root/.spamassassin/user_prefs" for user prefs file debug: bayes: 11464 tie-ing to DB file R/O /root/.spamassassin/bayes_toks debug: bayes: 11464 tie-ing to DB file R/O /root/.spamassassin/bayes_seen debug: bayes: found bayes db version 2 debug: Score set 2 chosen. debug: Initialising learner debug: Initialising learner debug: Syncing Bayes journal and expiring old tokens... debug: lock: 11464 created /root/.spamassassin/bayes.lock.sps-c1s9p14.j-e-b.net.11464 debug: lock: 11464 trying to get lock on /root/.spamassassin/bayes with 0 retries debug: lock: 11464 link to /root/.spamassassin/bayes.lock: link ok debug: bayes: 11464 tie-ing to DB file R/W /root/.spamassassin/bayes_toks debug: bayes: 11464 tie-ing to DB file R/W /root/.spamassassin/bayes_seen debug: bayes: found bayes db version 2 synced Bayes databases from journal in 0 seconds: 457 unique entries (562 total entries) debug: bayes: expiry check keep size, 75% of max: 112500 debug: bayes: token count: 196598, final goal reduction size: 84098 debug: bayes: First pass? Current: 1073772599, Last: 1073562102, atime: 22118400, count: 2972, newdelta: 781658, ratio: 28.2967698519515 debug: bayes: something fishy, calculating atime (first pass) and after that nothing, for PID USER PRI NI SIZE RSS SHARE STAT LIB %CPU %MEM TIME COMMAND 11464 root 14 0 15092 14M 1600 R 0 94.6 5.7 30:25 sa-learn and running. SpamAssassin is 2.61, Perl is: Summary of my perl5 (revision 5.0 version 6 subversion 1) configuration: Platform: osname=linux, osvers=XXX, archname=i686-linux uname='linux sps-c1s9p14.j-e-b.net XXX XXX i686 unknown ' config_args='' hint=recommended, useposix=true, d_sigaction=define usethreads=undef use5005threads=undef useithreads=undef usemultiplicity=undef useperlio=undef d_sfio=undef uselargefiles=define usesocks=undef use64bitint=undef use64bitall=undef uselongdouble=undef Compiler: cc='cc', ccflags ='-fno-strict-aliasing -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64', optimize='-O2', cppflags='-fno-strict-aliasing' ccversion='', gccversion='2.95.3 19991030 (prerelease)', gccosandvers='' intsize=4, longsize=4, ptrsize=4, doublesize=8, byteorder=1234 d_longlong=define, longlongsize=8, d_longdbl=define, longdblsize=12 ivtype='long', ivsize=4, nvtype='double', nvsize=8, Off_t='off_t', lseeksize=8 alignbytes=4, usemymalloc=n, prototype=define Linker and Libraries: ld='cc', ldflags =' -L/usr/local/lib' libpth=/usr/local/lib /lib /usr/lib libs=-lnsl -lndbm -ldb -ldl -lm -lc -lposix -lcrypt -lutil perllibs=-lnsl -ldl -lm -lc -lposix -lcrypt -lutil libc=/lib/libc-2.1.1.so, so=so, useshrplib=false, libperl=libperl.a Dynamic Linking: dlsrc=dl_dlopen.xs, dlext=so, d_dlsymun=undef, ccdlflags='-rdynamic' cccdlflags='-fpic', lddlflags='-shared -L/usr/local/lib' Characteristics of this binary (from libperl): Compile-time options: USE_LARGE_FILES Built under linux Compiled at Jan 8 2002 10:55:38 @INC: /opt/perl/lib/5.6.1/i686-linux /opt/perl/lib/5.6.1 /opt/perl/lib/site_perl/5.6.1/i686-linux /opt/perl/lib/site_perl/5.6.1 /opt/perl/lib/site_perl . --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
Re: [SAtalk] SQL Integration
On Sat, 10 Jan 2004, Andrew Cranson wrote: > See > http://www.mail-archive.com/[EMAIL PROTECTED]/msg03016.html > * http://nyx.ilk.com/qsspam/ > > There is a mention of a delete_mail_threshold. I have been trying to > implement that via mySQL but it doesn't appear to be doing anything. Is > there a component require that includes this function, or should it be > included by default? (SA 2.61) Any notion of a "delete_mail" threshold must reside within your qmail setup and not within SpamAssassin. SpamAssassin *only* tags e-mail as *possible* spam; it *never* deletes it. Any deletion of tagged messages (note that I did not say, "spam") is up to the delivery agent that follows SA in the delivery pipe. As delivered, SA *cannot* delete e-mail. Nor, in my humble opinion, should it. Sooner or later you *will* get a false-positive, and if your system is designed to delete tagged-mail then you *will* lose that message, irretrievably, forever. Cheers. ++-+ | Carl Richard Friend (UNIX Sysadmin)| West Boylston | | Minicomputer Collector / Enthusiast| Massachusetts, USA | | mailto:[EMAIL PROTECTED]+-+ | http://users.rcn.com/crfriend/museum | ICBM: 42:22N 71:47W | ++-+ --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
Re: [SAtalk] SQL Integration
Hi,
See
http://www.mail-archive.com/[EMAIL PROTECTED]/msg03016.html
* http://nyx.ilk.com/qsspam/
There is a mention of a delete_mail_threshold. I have been trying to
implement that via mySQL but it doesn't appear to be doing anything. Is
there a component require that includes this function, or should it be
included by default? (SA 2.61)
Thanks
Carl R. Friend said:
>On Sat, 10 Jan 2004, Andrew Cranson wrote:
>
>
>> Hi, strange, it's ignoring pretty much anything else I ask it to do via
mysql. Is there anything would override mysql preferences?
>
>What do your per-user SQL preferences look like? In order to
> override a stock score one must specify "score RULE_NAME" for the
"preference" column and the desired score in the "value" column. To wit,
one of my pet peeves is invisible HTML text, so I over-rode the default
with a SQL sequence of:
>
> insert into userpref (username,preference,value)
> values ('crfriend','score HTML_FONT_INVISIBLE','3.0');
>
>If you're missing the "score" component, it will not work
> properly (been there, done that).
>
>In general, the syntax in the MySQL database is identical to
> that in the various *.cf files.
>
>Cheers.
>
> ++-+
| Carl Richard Friend (UNIX Sysadmin)| West Boylston |
| Minicomputer Collector / Enthusiast| Massachusetts, USA |
| mailto:[EMAIL PROTECTED]+-+
| http://users.rcn.com/crfriend/museum | ICBM: 42:22N 71:47W |
++-+
>
>
---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
Re: [SAtalk] SQL Integration
On Sat, 10 Jan 2004, Andrew Cranson wrote: > What per-user preferences are supported by the mysql integration? Just the > basics like required_hits and white/blacklisting, or is it possible to > support more? Thanks. The per-user configurability capabilities of the MySQL interface go well beyond white/black-list and "required hits". Whilst those are sufficient for average users, it's also possible to override scores on a per-user basis and either raise/lower per-rule scores or even disable specific tests. The latter is important for people who routinely communicate with sites that, for whatever reason, are listed in a DNS-blacklists, and if a site is implementing hightly-custom rules. Cheers. ++-+ | Carl Richard Friend (UNIX Sysadmin)| West Boylston | | Minicomputer Collector / Enthusiast| Massachusetts, USA | | mailto:[EMAIL PROTECTED]+-+ | http://users.rcn.com/crfriend/museum | ICBM: 42:22N 71:47W | ++-+ --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
[SAtalk] RE: Neural Net scoring
> From: Nix > Sent: Saturday, January 10, 2004 10:35 AM [...] > > See bug 2910. > Thanks. Here's the link: http://bugzilla.spamassassin.org/show_bug.cgi?id=2910 Copyright (c)2003 Henry Stern Fast SpamAssassin Score Learning Tool Henry Stern Faculty of Computer Science Dalhousie University 6050 University Avenue Halifax, NS Canada B3H 1W5 [EMAIL PROTECTED] January 8, 2004 1. WHAT IS IT? This program is used to compute scores for SpamAssassin rules. It makes use of data files generated by the suite of scripts in spamassassin/masses. The program outputs the generated scores in a file titled 'perceptron.scores'. The advantage of this program over that of the genetic algorithm (GA) implementation in spamassassin/masses/craig_evolve.c is that while the GA requires several hours to run on high-end machines, the perceptron requires only about 15 seconds of CPU time on an Athlon XP 1700+ system. This makes incremental updates and score personalization practical for the end-user and gives developers a better idea just how useful a new rule is. [...] This looks interesting. I echo Sidney's follow-up: "That's impressive. How close are the results to those of the GA? That's actually two questions: 1) How close is the scoring that the perceptron comes up with to the scoring that the GA comes up with? and 2) How much difference in spam categorization results is there between using the scores generated by the perceptron and those generated by the GA?" This approach looks like it does a good job of mixing some of the benefits of a the current additive scoring approach and a Neural Net. The final neural net that is derived is much simpler than a full-fledged net, but it has the advnatage of being simple to understand, and maps well onto the existing framework. It would've been interesting to see what sorts of scores this approach produced, and how well they worked in practice. (There's also a question of copyright that would need to be resolved for this approach to gain wider use.) --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
Re: [SAtalk] SQL Integration
Hi, strange, it's ignoring pretty much anything else I ask it to do via mysql. Is there anything would override mysql preferences? Carl R. Friend said: >On Sat, 10 Jan 2004, Andrew Cranson wrote: > >> What per-user preferences are supported by the mysql integration? Just >> the >> basics like required_hits and white/blacklisting, or is it possible to >> support more? Thanks. > >The per-user configurability capabilities of the MySQL interface > go well beyond white/black-list and "required hits". Whilst those > are sufficient for average users, it's also possible to override > scores on a per-user basis and either raise/lower per-rule scores > or even disable specific tests. > >The latter is important for people who routinely communicate with > sites that, for whatever reason, are listed in a DNS-blacklists, and > if a site is implementing hightly-custom rules. > >Cheers. > > ++-+ > | Carl Richard Friend (UNIX Sysadmin)| West Boylston | > | Minicomputer Collector / Enthusiast| Massachusetts, USA | > | mailto:[EMAIL PROTECTED]+-+ > | http://users.rcn.com/crfriend/museum | ICBM: 42:22N 71:47W | > ++-+ > > --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
RE: [SAtalk] Re: Is BigEvil for me?
> From: Bryan Hoover > Sent: Friday, January 09, 2004 10:52 PM [...] > > > Gary Funck wrote: > > > > > From: Robert Menschel > > Here's an idea that I've been considering for a while: have SA > change its > > scoring strategy to use a Neural Net, instead of using the > strictly additive > > scoring. SA would still use its custom rules to detect spam > markers, but it > > Just a couple comments that may or may not be on the same page... > > It is an idea that sort of captures the imagination. Though, isn't that > very similar to what's already being done with the GA, as well as > Bayes? Not that similar. The GA as I understand it, is using an AI technique to optimize a linear equation - which is given by: Sum(score[i]) for each i-th rule. This means that a rule is constrained to have the same weight in all contexts. Let's say that a given rule is not a good determinant of spam when seen with rules A and B, but is a good determinant of spam when seen with rules C and D. In the current framework, the rule would get the same weighting in both contexts, but a trained neural network is capable of differentiating those situations and giving a higher weightin in the (C,D) context. Also, NN's use a non-linear function that a function that has a sharp cutoff in the middle, thus the NN will tend to disambiguate close calls more sharply than a linear function would. > The GA sets scores according to what turns out to be most > accurate - least FPs, FNs. Bayes anaylizes selected email tokens to > this end. What would you feed the nueral net for learning? > See above on the GA. The Bayes would still be a component in the scoring as it is now. Bayes represents the adapative aspect of SA, and would continue to do so. One difficulty of a NN approach is that it wouldn't work well with new custom rules without retraining, and for that reason it may be unsuitable for many situations. --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
[SAtalk] mysql user preferences
Hi, If I configure SA to use mysql user preferences, does it allow for *any* configuration option to be overriden? For example, if I have skip_rbl_checks as 0 in local.cf (so RBL checks are ENABLED) can I then insert a skip_rbl_checks into mysql and set it to 1 to disable RBL for a particular user? Thanks ricardo --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
Re: [SAtalk] Is BigEvil for me?
On Fri, 9 Jan 2004, Gary Funck stipulated: > Here's an idea that I've been considering for a while: have SA change its > scoring strategy to use a Neural Net, instead of using the strictly additive > scoring. SA would still use its custom rules to detect spam markers, but it > would let the NN do the scoring. See bug 2910. -- As they say, build a better mousetrap and the world will beat a path to your door. But nobody ever got anywhere outlawing mice. --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
[SAtalk] SQL Integration
What per-user preferences are supported by the mysql integration? Just the basics like required_hits and white/blacklisting, or is it possible to support more? Thanks. --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
RE: [SAtalk] Web Front End
My company uses WebUserPrefs and a MySQL setup. It's worked really well for us and is easily expandable since the PHP is modular. http://webuserprefs.pipegrep.net -Original Message- From: Waterfront Internet Service [mailto:[EMAIL PROTECTED] Sent: Friday, January 09, 2004 11:41 PM To: [EMAIL PROTECTED] Subject: [SAtalk] Web Front End Anyone have or know of a web front end so users can set their own scores, whitelists & blacklists which is saved to their own user rules? Regards, Steve --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
[SAtalk] problem getting full email to spamd with --virtual-config-dir
hello,
Im using 2.61, sendmail,e spamass-milter, spamc and spamd. I have a 2 machine
setup sendmail on one and spamd on the other.
No matter what i do i can't get the full mail/user info to spamd for use in
virtual config dirs. The only thing i get is the local part of the mailadress %
d gives nothing.
I am using:
spamassmilter -u root -r 30 -p "${SOCKET}" -f -- -d
spamd -x -c --virtual-config-dir="/usr/local/spamassassin/%u/spamassassin" -u
-a -d -m 10 -i 0.0.0.0 -A
any clue to what i do wrong? or how i should get it to work?
regards, ove
---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
Re: [SAtalk] own rules still not working --- maybe there's something wrong with the rules?
My first thought would be to make sure that you're restarting spamd after
making the changes. If you are, then make sure spamd is running as a user with
access to where you put the rule (but if you went so far as to stick it in the
global rules, that would seem to eliminate that).
On Sat, 10 Jan 2004, Stefan Urbat wrote:
> Watch out for following rule, as mentioned working fine with direct
> invocation of the spamassassin script, but even after putting it in the
> /usr/share/spamassassin 20_head_tests.cf and 50_scores.cf files (did so
> for pure desparation and testing; I know, that this is a no-no) it is
> consequently ignored by spamd (adding 3.100 3.100 3.100 in the score line
> doesn't change anything, before the From =~ I put in a tab instead of
> space, also without any effect):
>
> header FROM_HAS_UNDERSCORE_IN From =~ /_.{1,2}\@/
> describe FROM_HAS_UNDERSCORE_IN From: local part contains a spam
> positioned underscore character
>
> score FROM_HAS_UNDERSCORE_IN 3.1
>
> Any kind of help is highly appreciated...
>
> --
> Registered Linux-User #169380 on http://counter.li.org/
>
>
> ---
> This SF.net email is sponsored by: Perforce Software.
> Perforce is the Fast Software Configuration Management System offering
> advanced branching capabilities and atomic changes on 50+ platforms.
> Free Eval! http://www.perforce.com/perforce/loadprog.html
> ___
> Spamassassin-talk mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
>
--
Adam Lopresto
http://cec.wustl.edu/~adam/
Peace and long life, unless the two be mutually exclusive.
---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
Re: [SAtalk] OT: My REALY REALY Crazy idea!! ahahahahahah
Chris has been working on this stuff WAY too hard lately back away from the bigevil Chris... back away remember 'sun light' and 'trees' ? remember how pretty those are? pretty pretty trees - Original Message - From: "Chris Santerre" <[EMAIL PROTECTED]> To: "Spamassassin-Talk (E-mail)" <[EMAIL PROTECTED]> Sent: Friday, January 09, 2004 4:34 PM Subject: [SAtalk] OT: My REALY REALY Crazy idea!! ahahahahahah > Ok, this one is out in left field but I think it would make spam fun. The > idea jumped in my head from a Spam-L post. Are you sitting down? > > Tamogachi Gorilla Spam!!! > > So we figure out a way to implement a pet gorilla program into spamassassin. > Each spam runs thru an algorithm to produce a token. This token's binary > pattern is then fed to the pet gorilla to produce some effect. Emotional, > Physical, and possibly environmental. > > Your pet gorilla would be at the mercy of what kind of spam you got. Imagine > checking your email in the morning and finding your pet gorilla is drunk on > banana rum punch and screaming for food! > > Good way to get people to feed spam into bayes! > > People would be walking around asking each other, "How's your monkey today?" > > Ok, it's 5:30 PM Friday. I really need to go home! > > (Watch someone market this and make millions.) > Tamogachi Gorilla Spam (tm.) Patent pending...blah blah lol.. > > Chris Santerre > System Admin and SA Custom Rules Emporium keeper > http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm > "A little nonsense now and then, is relished by the wisest men." - Willy > Wonka > > > --- > This SF.net email is sponsored by: Perforce Software. > Perforce is the Fast Software Configuration Management System offering > advanced branching capabilities and atomic changes on 50+ platforms. > Free Eval! http://www.perforce.com/perforce/loadprog.html > ___ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk > --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
Re: [SAtalk] Web Front End
Also look at Maia Mailguard. It's about to have 1.0rc2 out. Very promising. http://www.renaissoft.com/maia/ Matt Mark Frank wrote: On January 10, 2004, Waterfront Internet Service wrote: Anyone have or know of a web front end so users can set their own scores, whitelists & blacklists which is saved to their own user rules? Check out webmin/usermin. http://www.webmin.com/ http://www.usermin.com/ Mark --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
Re: [SAtalk] Web Front End
On January 10, 2004, Waterfront Internet Service wrote: > Anyone have or know of a web front end so users can set their own scores, > whitelists & blacklists which is saved to their own user rules? Check out webmin/usermin. http://www.webmin.com/ http://www.usermin.com/ Mark -- "The fix is only temporary...unless it works." - Red Green --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
[SAtalk] Trying to filter the blue pills beginning with V
Hello List (hope that message gets through the list filter anyways *g*) I tried to create a rule to filter occurences of the word for the blue little pills beginning with V, that contained unsual letters for i and a (like ã,å,ï aso...) but unfortunately only the word containing "normal" letters is recognized, the others not. I inserted the letters into the .cf using MC on my linux-bash. do i need to use another /\b(?:windows)\*argh\*\b/i editor ? Would be happy for any suggestions Thanks Kai Michael Poppe, [EMAIL PROTECTED] --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
RE: [SAtalk] Re: Pyzor reporting
BH> Bryan Hoover wrote: BH> > BH> > Alan Munday wrote: BH> > > BH> > > Is anyone finding pyzor reporting a bit hit and miss? BH> > BH> > Just got my first spam in days today. Taught Bayes, BH> reported to Razor2, BH> > and you reminded me about Pyzor. I got: BH> > BH> > [EMAIL PROTECTED] pyzor report --mbox > 66.250.40.33:24441 (200, 'OK') BH> > BH> > I'd tested reporting a couple days ago, and I got the BH> same results -- BH> > that is, looks good to me, and no timeout. BH> BH> I should qualify this though -- there was only one mail in BH> the box. I BH> wonder if that's having any effect in your situation. You BH> might want to BH> try a few single mails to see if BH> there's any difference -- it's possible Pyzor's multi-mail behavior, BH> and/or your system do not agree, that is. The original mbox had only 4 messages in it. I ran some more through last night >100 and Pyzor failed to report 12% of them. Alan --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
[SAtalk] own rules still not working --- maybe there's something wrong with the rules?
Watch out for following rule, as mentioned working fine with direct
invocation of the spamassassin script, but even after putting it in the
/usr/share/spamassassin 20_head_tests.cf and 50_scores.cf files (did so
for pure desparation and testing; I know, that this is a no-no) it is
consequently ignored by spamd (adding 3.100 3.100 3.100 in the score line
doesn't change anything, before the From =~ I put in a tab instead of
space, also without any effect):
header FROM_HAS_UNDERSCORE_IN From =~ /_.{1,2}\@/
describe FROM_HAS_UNDERSCORE_IN From: local part contains a spam
positioned underscore character
score FROM_HAS_UNDERSCORE_IN 3.1
Any kind of help is highly appreciated...
--
Registered Linux-User #169380 on http://counter.li.org/
---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
RE: [SAtalk] Forged Outlook from Outlook!
Never seen that - post some headers?!? If someone can confirm it, submit a bug report. m/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dave Sheeran Sent: Friday, January 09, 2004 6:52 AM To: [EMAIL PROTECTED] Subject: [SAtalk] Forged Outlook from Outlook! Hi Folks I'm getting emails caught by SA 1.61 on the following rules. Not sure why as I sent it myself from MS Office Outlook 2003 (11.5608.5606) 3.3 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.9 MISSING_OUTLOOK_NAME Message looks like Outlook, but isn't Any ideas? Dave S --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
