Re: [SAtalk] 2.1 compile error...

2002-02-18 Thread Uwe Willenbacher
On Mon, 18 Feb 2002 23:25:11 -0700 (Mountain Standard Time) Charlie Watts <[EMAIL PROTECTED]> wrote: >On Mon, 18 Feb 2002, Uwe Willenbacher wrote: > >> Sorry to bug you, but I decided today to install the latest greatest >>dev >> version of SpamAssassin 2.1, however, I got following compile err

Re: [SAtalk] 2.1 compile error...

2002-02-18 Thread Charlie Watts
On Mon, 18 Feb 2002, Uwe Willenbacher wrote: > Sorry to bug you, but I decided today to install the latest greatest dev > version of SpamAssassin 2.1, however, I got following compile error: > > gcc -fno-strict-aliasing -I/usr/local/include -D_LARGEFILE_SOURCE > -D_FILE_OFFSET_BITS=64 -O Hi all,

[SAtalk] 2.1 compile error...

2002-02-18 Thread Uwe Willenbacher
Hi all, Sorry to bug you, but I decided today to install the latest greatest dev version of SpamAssassin 2.1, however, I got following compile error: gcc -fno-strict-aliasing -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -O Hi all, spamd/spamc.c \ -o spamd/sp

Re: [SAtalk] Tagged messages sent to specific mailbox...

2002-02-18 Thread Charlie Watts
On Mon, 18 Feb 2002, Justin Stayton wrote: > I'm wanting to have messages tagged by SpamAssassin to be sent to a > specific mailbox (such as [EMAIL PROTECTED]) instead of making it through > to the original destination (address in "To:" field). Is this possible? > And if so, how can this be imple

Re: [SAtalk] Scaling problems

2002-02-18 Thread Charlie Watts
On Mon, 18 Feb 2002, Daniel Rogers wrote: > sendmail forks 10-15 procmails, which fork 10-15 spamcs, which fork 10-15 > spamds > > Spammer sends over 30 of these in under two minutes I let postfix queue those up - I have postfix set to not have more than a small number of delivery agents running

[SAtalk] Tagged messages sent to specific mailbox...

2002-02-18 Thread Justin Stayton
Hi Everyone, I'm wanting to have messages tagged by SpamAssassin to be sent to a specific mailbox (such as [EMAIL PROTECTED]) instead of making it through to the original destination (address in "To:" field). Is this possible? And if so, how can this be implemented? Thanks. Justin

[SAtalk] This one shot through SA

2002-02-18 Thread Jason Haar
This spam zapped through SA 2.1 with a value of 1.8. I noticed the "X-Mailer: 007 Direct Email Easy" header - Googling it found nothing but spam matches - and the following site sells it as a bulk mailer - so that's sounds pretty damning. http://tlc.mutualchange.com/email-marketing/e/i1/i71.htm

Re: [SAtalk] Scaling problems

2002-02-18 Thread Jeremy A. Mates
* Daniel Rogers <[EMAIL PROTECTED]> [2002-02-18T17:10-0800]: > I was thinking that sendmail with milter might help with this problem, but > installing sendmail 8.12.2 started to hurt my head. Would milter help? > Would any other mailers handle this better? Milter would probably help, or you can

Re: [SAtalk] Mangled messages

2002-02-18 Thread Kevin Dangoor
Well, it looks like the suggested procmailrc changes did the trick! The heretofore problematic IMDB message came through complete and just fine. This is what I ended up with: :0 * $RECIP ?? ^^kid@$DOMAIN { :0fw | perl -I../www/blognet/lib ../spamassassin -c ~/.spamassassin -P

[SAtalk] Scaling problems

2002-02-18 Thread Daniel Rogers
Recently, we've been the unfortunate recepients of several spams that are sent so quickly as to cause spamassassin to overwhelm our mail server. Here's what happens: Spammer connects to smtp port, gives his helo and mail from, then gives 10-15 "rcpt to:"s, essentially bcc'ing a bunch of people o

[SAtalk] ends in nums and hotmail

2002-02-18 Thread Andrew Kohlsmith
I am wondering if anyone would be interested in a score which is not as high for email addresses ending in numbers if the address is an @hotmail.com email. The *vast* majority of hotmail addresses end in numbers which tends to knock emails over the spam score. I'm already knocking off 0.7 p

RE: [SAtalk] Postfix and SpamAssassin 2.01 - spamproxyd/Mail::Audit problems

2002-02-18 Thread Greg Blakely
I had to do some weird stuff for that error. Maybe a perl guru could set us all straight, but what I did was: 1. Installed the perl module Net::SMTP::Server 2. Copied the file /usr/local/lib/perl5/site_perl/5.005/Net/SMTP/Server/SmartHost.pm to /usr/local/lib/perl5/site_perl/5.005/Mail/SpamAss

[SAtalk] Re: [B5JMS] Dissention is unpatriotic ... (false positive)

2002-02-18 Thread Theo Van Dinter
This message to the Babylon 5 Mailing list got flagged as spam, mostly due to the 4-point match for %-escapes in an URL (HTTP_ESCAPED_HOST): 20_body_tests.cf:rawbody HTTP_ESCAPED_HOST /http\:\/\/[^\/]*%/ To make the regexp more valid, it should be something like: /http\:\/\/[^\/\s:]*\%/

RE: [SAtalk] Postfix and SpamAssassin 2.01 - spamproxyd/Mail::Audit problems

2002-02-18 Thread Stewart, John
Craig Hughes wrote: > Actually, we dropped Mail::Audit since it doesn't work in a variety of > situations, and replaced it with our own version, > Mail::SpamAssassin::NoMailAudit -- change the line to use > that class instead > (and the "use" line at the beginning of the file) and you > should

RE: [SAtalk] Postfix and SpamAssassin 2.01 - spamproxyd/Mail::Audit problems

2002-02-18 Thread Greg Blakely
Up around the top of the script where it says "use this; use that; use the-other;" put in a line that says "use Mail::Audit;" This only creates ONE process, though. The author has given me a copy of a newer script he wrote that spawns children. It's very stable. I've had it running here for ab

Re: [SAtalk] X-Mail-Format-Warning.

2002-02-18 Thread Craig Hughes
Yeah, that bug's already been fixed in CVS. I will be doing a new release this week sometime I think. You can download the latest code from http://www.spamassassin.org/ in the downloads page -- grab the 2.1CVS code -- it will more or less be what's distributed in the next day or so. It is very

[SAtalk] X-Mail-Format-Warning.

2002-02-18 Thread Chris Ball
Hi, all. I installed SpamAssassin earlier this morning, from CPAN. Everything is working correctly, _except_ for my linux-kernel mbox. There are five other mailboxes that are all being procmailed to their destination fine. In the case of linux-kernel mail, the mail arrives in the box _missing_

Re: [SAtalk] Non-essential feature request: spamd reload rules on SIGHUP

2002-02-18 Thread Tom Lipkis
On 17 Feb 2002 11:29:53 -0800 Craig Hughes wrote: > I'll happily accept patches. Yeah, I've been meaning to do it for several weeks now, but it's not going to happen any time soon. I was hoping someone would see this and say "what a great idea, I think I'll do that." Apparently not. > In the

Re: [SAtalk] Auto-CVS build apparently borken

2002-02-18 Thread Craig Hughes
My bad, I failed to change the MANIFEST file when I removed MyMailAudit.pm, so the "make dist" was failing. Fixed now. I'll upload the new dist packages now, and they should rebuild automatically tonight sometime. C on 2/18/02 11:55 AM, Craig Hughes at [EMAIL PROTECTED] wrote: > It looks like

Re: [SAtalk] Postfix and SpamAssassin 2.01 -spamproxyd/Mail::Audit problems

2002-02-18 Thread Craig Hughes
on 2/18/02 11:31 AM, Stewart, John at [EMAIL PROTECTED] wrote: > The author of Mail::Audit, Simon Cozens, commented: >> Sounds like someone's forgot the "use Mail::Audit". Actually, we dropped Mail::Audit since it doesn't work in a variety of situations, and replaced it with our own version, Mail

Re: [SAtalk] Non-essential feature request: spamd reload rules onSIGHUP

2002-02-18 Thread Craig Hughes
on 2/18/02 11:23 AM, Daniel Rogers at [EMAIL PROTECTED] wrote: > On Sun, Feb 17, 2002 at 11:29:53AM -0800, Craig Hughes wrote: >> I'll happily accept patches. In the meantime, killing spamd won't cause >> any loss of mail, only loss of identification of spam messages for that >> fraction of a se

Re: [SAtalk] Another MX test?

2002-02-18 Thread Daniel Rogers
On Mon, Feb 18, 2002 at 12:25:19AM -0700, Charlie Watts wrote: > I don't think anybody has done this yet, but it would actually be a really > cool thing to have ... lots of spammers have a bunch of sender domains, > but their MX servers are all on the same box. My thought exactly. > I didn't tak

[SAtalk] Auto-CVS build apparently borken

2002-02-18 Thread Craig Hughes
It looks like the automated roll of CVS as the "unstable" build on the spamassassin.org download page is broken. It's not up to date. It looks like the last rebuild from CVS was Feb 11th. I'll see if I can figure out what's going on, but I might need to get in touch with jm and hope he's in an

Re: [SAtalk] New variation on Nigeria scam?

2002-02-18 Thread Craig Hughes
on 2/18/02 9:04 AM, Greg Ward at [EMAIL PROTECTED] wrote: > This one slipped through this morning with a score of just 1.5. (It now > gets 4.5 since I reported it to Vipul's Razor -- still not enough!) Yeah, I got a Sierra Leone scam the other day which scored 0! These guys are getting very go

[SAtalk] Postfix and SpamAssassin 2.01 - spamproxyd/Mail::Audit problems

2002-02-18 Thread Stewart, John
I am trying to install your spamproxyd so I can get SpamAssasssin working to tag messages flowing through our postfix mail gateway (running on Solaris 2.6) to our internal Exchange server. I installed SA 2.01, which as a simple application seems to work well. However, when I tried to use spampro

Re: [SAtalk] Re: BLOCK: ISPs allowing numeric IDs (fwd)

2002-02-18 Thread Charlie Watts
On Mon, 18 Feb 2002, Duncan Findlay wrote: > On Mon, Feb 18, 2002 at 02:53:08AM -0700, Charlie Watts wrote: > > On Mon, 18 Feb 2002, Charlie Watts wrote: > > > > > Some interesting discussion here. Apparently many freemail providers > > > require the first character of your username to begin with

Re: [SAtalk] Non-essential feature request: spamd reload rules on SIGHUP

2002-02-18 Thread Daniel Rogers
On Sun, Feb 17, 2002 at 11:29:53AM -0800, Craig Hughes wrote: > I'll happily accept patches. In the meantime, killing spamd won't cause > any loss of mail, only loss of identification of spam messages for that > fraction of a second when it's not listening, or for those messages > already in proc

Re: [SAtalk] Re: BLOCK: ISPs allowing numeric IDs (fwd)

2002-02-18 Thread Marc G. Fournier
H ... I missed the gist of the thread here, but I work at a University where all the students ideas are numeric, with a trailing alpha character (##[a-z]@) ... its the way its always been here, from long before I arrived ... but if I'm getting an idea just from the subject, such a 'block

Re: [SAtalk] Re: BLOCK: ISPs allowing numeric IDs (fwd)

2002-02-18 Thread Duncan Findlay
On Mon, Feb 18, 2002 at 02:53:08AM -0700, Charlie Watts wrote: > On Mon, 18 Feb 2002, Charlie Watts wrote: > > > Some interesting discussion here. Apparently many freemail providers > > require the first character of your username to begin with a letter, not a > > number. > > > header FROM_INVAL

[SAtalk] New variation on Nigeria scam?

2002-02-18 Thread Greg Ward
This one slipped through this morning with a score of just 1.5. (It now gets 4.5 since I reported it to Vipul's Razor -- still not enough!) I already have a rule /\b(china|korea|taiwan)\b/i in my personal config. Time to add one for /\b(nigeria|zimbabwe)\b/i (I have seen a Zimbabwean variation o

Re: [SAtalk] Windows NT and Spamassassin - my experiences

2002-02-18 Thread Christoph Conrad
Hi Charlie, > Have you tried setting the score for A_FROM_IN_AUTO_WLIST to 0, > so it isn't tested? Tested it, works! Thank you! Best regards, Christoph Conrad -- TTi Entwicklungszentrum GmbH, Elisabethstr. 16, D-52062 Aachen Fon: +49 241 47051-0 Fax: +49 241 47051-89 Web: http://www

Re: [SAtalk] Re: Another MX test?

2002-02-18 Thread Charlie Watts
On Mon, 18 Feb 2002, Daniel Pittman wrote: > On Sun, 17 Feb 2002, Daniel Rogers wrote: > > It seems I've been getting a lot of spam lately that has a valid MX, > > but the MX is 127.0.0.1 (loopback). Any chance we could add a test for > > this? > > That will break a large number of legitimate uses

[SAtalk] Re: Another MX test?

2002-02-18 Thread Daniel Pittman
On Sun, 17 Feb 2002, Daniel Rogers wrote: > It seems I've been getting a lot of spam lately that has a valid MX, > but the MX is 127.0.0.1 (loopback). Any chance we could add a test for > this? That will break a large number of legitimate uses of email forwarding, notably mine.[1] I use the Unix

[SAtalk] Re: BLOCK: ISPs allowing numeric IDs (fwd)

2002-02-18 Thread Charlie Watts
On Mon, 18 Feb 2002, Charlie Watts wrote: > Some interesting discussion here. Apparently many freemail providers > require the first character of your username to begin with a letter, not a > number. > header FROM_INVALID_FREEMAIL_USER From =~ >/^\d.*([hg]otmail|yahoo|netscape|msn|aol|algelfi

Re: [SAtalk] Windows NT and Spamassassin - my experiences

2002-02-18 Thread Christoph Conrad
Hi Charlie, > Have you tried setting the score for A_FROM_IN_AUTO_WLIST to 0, > so it isn't tested? No, not tried yet, but will do so! > Are you trying to actually do delivery with spamassassin? I'm > curious what other mail software you are running on that system. My configura

[SAtalk] Re: BLOCK: ISPs allowing numeric IDs (fwd)

2002-02-18 Thread Charlie Watts
Some interesting discussion here. Apparently many freemail providers require the first character of your username to begin with a letter, not a number. I'm wondering if an even-more-generic "From begins with a number" test would be useful for SpamAssassin. There already is a FROM_ENDS_IN_NUMS te

[SAtalk] Windows NT and Spamassassin - my experiences

2002-02-18 Thread Christoph Conrad
Hi, i installed Spamassassin on GNU/Linux at the weekend and i am VERY impressed. It works great. I tried to install it on Windows but this failed due several reasons. * There are several getpwuid which are not available on Windows NT I found that they could be substituted by ;; SpamAssassin.