Re: sought rules
Charles Gregory wrote: > On Wed, 4 Nov 2009, Bowie Bailey wrote: >> The SA core rules are not updated very often. For the most part, they >> just work. If you are not already doing so, you may want to consider >> Justin's Sought ruleset. It is dynamically generated and updated every >> 4 hours or so. >> >> http://wiki.apache.org/spamassassin/SoughtRules > > Is there a way to examine the sought rules *before* installing them into > my spamassassin? Or at least a 'readme' so that if I download them via > sa-update I can know which files will be created and how to remove them. The sa-update channel will put the rules into "/var/lib/spamassassin/3.002005/sought_rules_yerp_org/20_sought.cf". You can take a look at the rules there (all 293 of them at the moment). > I have a number of custom rules and want to vet the auto-generated > rules for overlap Since the rules are constantly changing (every 4 hours), I'm not sure how useful it will be to look for overlaps. If you find an overlap in one version of the ruleset, it may disappear in the next update. Actually, looking at my stats, I'm not seeing the Sought ruleset being very helpful recently. The best rule, JM_SOUGHT_FRAUD_3, hit less than 1% of my spam in the last month and the worst rule, JM_SOUGHT_3, hit 0.33% of spam and 0.45% of ham. Anyone else seeing this? The best rules for me at the moment are Razor2, DCC, and URIBL. -- Bowie
Re: what about blacklist.spambag.org?
* Luigi Gasbarro : > > I checked my mailserver vs http://cqcounter.com/rbl_check/ and the > only negative response comes from blacklist.spambag.org It's dead -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de
Re: sought rules
On 11/4/2009 5:22 PM, Charles Gregory wrote: On Wed, 4 Nov 2009, Bowie Bailey wrote: The SA core rules are not updated very often. For the most part, they just work. If you are not already doing so, you may want to consider Justin's Sought ruleset. It is dynamically generated and updated every 4 hours or so. http://wiki.apache.org/spamassassin/SoughtRules Is there a way to examine the sought rules *before* installing them into my spamassassin? Or at least a 'readme' so that if I download them via sa-update I can know which files will be created and how to remove them. I have a number of custom rules and want to vet the auto-generated rules for overlap - Charles sa-update --help will show you how
Re: what about blacklist.spambag.org?
Luigi Gasbarro wrote: > > I checked my mailserver vs http://cqcounter.com/rbl_check/ and the > only negative response comes from blacklist.spambag.org > > I try same other IP (randomly) and have found the same RBL marking all > the address as negative The spambag.org domain is expired. It gives the same results for anything on the domain. > But is that list really credible? Nope. > And in particular is used? I certainly hope not! I've been using http://www.mxtoolbox.com/blacklists.aspx to check for blacklist listings. -- Bowie
Re: sought rules (was: Development dead)
On Wed, 4 Nov 2009, Bowie Bailey wrote: The SA core rules are not updated very often. For the most part, they just work. If you are not already doing so, you may want to consider Justin's Sought ruleset. It is dynamically generated and updated every 4 hours or so. http://wiki.apache.org/spamassassin/SoughtRules Is there a way to examine the sought rules *before* installing them into my spamassassin? Or at least a 'readme' so that if I download them via sa-update I can know which files will be created and how to remove them. I have a number of custom rules and want to vet the auto-generated rules for overlap - Charles
what about blacklist.spambag.org?
I checked my mailserver vs http://cqcounter.com/rbl_check/ and the only negative response comes from blacklist.spambag.org I try same other IP (randomly) and have found the same RBL marking all the address as negative But is that list really credible? And in particular is used? sorry for my poor english luigi
[Fwd: ** IMPORTANT: Karmasphere Reputation Service End of Life ***]
Just FYI, in case you might be using the Karmasphere plug-in with Spamassassin. Bill Original Message Subject: ** IMPORTANT: Karmasphere Reputation Service End of Life *** Date: Mon, 2 Nov 2009 19:31:55 + (GMT) From: D J Stewart To: karmasphere-us...@v2.listbox.com CC: karmasphere-annou...@v2.listbox.com Hello, As a registered user of Karmasphere Reputation Services, we wanted to let you know that we are discontinuing the service, effective November 16, 2009. If you are using the services through DNS, BQuery or email plugins, please make plans to adjust your configurations ideally prior to November 9 and no later than November 16, 2009. On that final date, we will disable the reputation servers so that you can no longer query them. Anybody who still has not removed Karmasphere's reputation service from their mail configuration when this happens may find that their mail servers appear to slow down while they wait for their queries to Karmasphere to time out. You may be thinking "why are they doing this?". The answer is that we are moving the business in a different direction. We have applied the experience gained in manipulating and analysing large data sets in reputation services into developing software that makes it easier to use Hadoop. This change in focus means that we no longer have the time nor resources to give the reputation service the attention it deserves. Rather than letting the service slowly decay, we are ending them. This end of service will proceed in the following stages. Stage 1: To November 9, 2009 Our services will continue as they have for the past 4 years. This gives you a chance to remove karmasphere's feeds and feedsets from your mail server configurations. Stage 2: November 9 - November 16, 2009 Our servers will continue to respond but our feedsets will whitelist everything. Stage 3: November 16, 2009 The reputation servers will be turned off. Thank you for using our services. The Karmasphere Team.
Re: Development dead
Kent Borg wrote: > I admit I have been ignoring Spamassassin because it seems to work. I > have been pleased that Spamassassin has been regularly flagging over 94% > of my spam. And this list seems active (if mostly ignored by me). > > But this e-mail caught my eye. Indeed, the version on spamassassin.org > is old and the version offered by my Ubuntu installation matches. Well, > if it is working pretty well in the face of rising spam volumes, that > seems OK. > > But what about the sa-update rules? They are probably newer...yes, but > my rules are from 2009-3-13. Do I have the latest? Is there a better > source from which to draw rules? Am I coasting on my ongoing spam/ham > training? The SA core rules are not updated very often. For the most part, they just work. If you are not already doing so, you may want to consider Justin's Sought ruleset. It is dynamically generated and updated every 4 hours or so. http://wiki.apache.org/spamassassin/SoughtRules I am also using these two from SARE: 90_2tld.cf.sare.sa-update.dostech.net 90_sare_freemail.cf.sare.sa-update.dostech.net and some of Adam Katz's khop rules (http://khopesh.com/wiki/Anti-spam): khop-bl.sa.khopesh.com khop-blessed.sa.khopesh.com khop-general.sa.khopesh.com khop-sc-neighbors.sa.khopesh.com (which also include Marc Perkel's HostKarma blacklists ... and white lists and yellow lists and brown lists ... :) -- Bowie
Re: Development dead
I admit I have been ignoring Spamassassin because it seems to work. I have been pleased that Spamassassin has been regularly flagging over 94% of my spam. And this list seems active (if mostly ignored by me). But this e-mail caught my eye. Indeed, the version on spamassassin.org is old and the version offered by my Ubuntu installation matches. Well, if it is working pretty well in the face of rising spam volumes, that seems OK. But what about the sa-update rules? They are probably newer...yes, but my rules are from 2009-3-13. Do I have the latest? Is there a better source from which to draw rules? Am I coasting on my ongoing spam/ham training? Thanks, -kb
Re: Development dead
On ons 04 nov 2009 15:10:45 CET, polloxx wrote Is the spamassassin development dead? On the website there's: 2008-06-12: SpamAssassin 3.2.5 has been released. join the dev maillist and ask the same question there, but as i see it, it being working on make sa 3.3.x stable for so long time now does not mean its dead, where did you get that idear from ? -- xpoint
Re: Development dead
polloxx wrote: > Hi, > > Is the spamassassin development dead? > On the website there's: 2008-06-12: SpamAssassin 3.2.5 has been released. > Not quite. If you look at svn, you'll see this: spamassassin_20091103151200.tar.gz03-Nov-2009 15:122.1M Doesn't look dead to me! :) -- Bowie
Development dead
Hi, Is the spamassassin development dead? On the website there's: 2008-06-12: SpamAssassin 3.2.5 has been released.
