Re: [SAtalk] Distributed Checksum Clearinghouse

2002-03-05 Thread Kelsey Cummings
On Tue, Mar 05, 2002 at 09:14:18AM +, Matt Sergeant wrote: > I'm not sure how Vipul is going to do this (I don't follow the Razor list > since Razor is so unreliable that we don't use it). I spent a week > investigating Nilsimsa, even wrote a perl module for it (which I may > release if I get

[SAtalk] Collecting statistics on win/loss rates

2002-03-05 Thread Rob McMillin
I don't know if any of you folks have read bug 62: http://bugzilla.spamassassin.org/show_bug.cgi?id=62 but I have an idea that I'd like to sound out to see whether people would be interested in (a) participating in, (b) if someone else is doing something like this, and (c) if you can see any p

[SAtalk] Good news for BSD SA-ers

2002-03-05 Thread Craig R Hughes
I finally managed to get perl working right on my fiancee's OSX machine, so now I can try and help with the various BSD complaints and stuff. C ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassas

Re: [SAtalk] SUBJ_ALL_CAPS

2002-03-05 Thread Rob McMillin
Daniel Rogers wrote: >On Tue, Mar 05, 2002 at 09:00:33PM -0800, Rob McMillin wrote: > >>Should be busted, but see bug 39; I believe another patch has been >>accepted for this bug. >> > >Isn't that LINE_OF_YELLING, not SUBJ_ALL_CAPS? > >Or did the patch affect both? > Ah, my bad -- you're right.

RE: [SAtalk] Refined WORK_AT_HOME rules

2002-03-05 Thread Michael Moncur
I missed a closing parenthesis. Trying again... body WORK_AT_HOME /(?:WORK|MAKE (?:MONEY|\${1,})|WORKING) (?:AT|FROM) HOME/i describe WORK_AT_HOME Information on how to work at home body HOME_EMPLOYMENT/(?:HOME EMPLOYMENT|HOME.?WORKER)/i describe HOME_EMPLOYME

Re: [SAtalk] SUBJ_ALL_CAPS

2002-03-05 Thread Daniel Rogers
On Tue, Mar 05, 2002 at 09:00:33PM -0800, Rob McMillin wrote: > Should be busted, but see bug 39; I believe another patch has been > accepted for this bug. Isn't that LINE_OF_YELLING, not SUBJ_ALL_CAPS? Or did the patch affect both? Dan. ___ Spamass

Re: [SAtalk] SUBJ_ALL_CAPS

2002-03-05 Thread Rob McMillin
Daniel Rogers wrote: >I just noticed that SUBJ_ALL_CAPS matches on a blank subject. Is this >intentional? > >Should it maybe be rewritten as: > >Subject =~ /^[^a-z]+$/ instead of Subject =~ /^[^a-z]*$/ > >? > >(Would that even work?) > Should be busted, but see bug 39; I believe another patch ha

[SAtalk] Re: Quiet

2002-03-05 Thread Daniel Pittman
On Tue, 5 Mar 2002, Juan F. Codagnone wrote: > I don't want spamassassin to modify (write any report) in the body of > the mail (i want't only to add the headers). I searched for any option > and i didn't find anything. In your preferences, set: report_header 1 use_terse_report 1 The use_terse

Re: [SAtalk] how to take care of false positives?

2002-03-05 Thread Matthew Cline
On Tuesday 05 March 2002 06:11 pm, Ricardo Kleemann wrote: > Hi, > > I have a message from a mailing list which spamassassin flags as spam, > however it is not. > > How can I handle that? If the mailing list puts its email address in the From header, put whitelist_from [EMAIL PROTECTED]

Re: [SAtalk] Automatic WHITElist?

2002-03-05 Thread Craig Hughes
But "Automatic list" sounds dumb. And neither black nor white are colors, so "automatic color list" is inaccurate. Maybe "Automatic brightness list" or "ABL". Personally I like leaving it as AWL and just having it be an inside joke. C On 3/5/02 6:05 PM, "Duncan Findlay" <[EMAIL PROTECTED]> wr

[SAtalk] Re: A Front Page rule?

2002-03-05 Thread Daniel Pittman
On Tue, 5 Mar 2002, Kerry Nice wrote: > Is Front Page ever used in non-spam. Yes. Sad as it is... > Would a check for some of these things be useful? ...but it probably would. :) [...] > Just out of curiousity, I looked quickly though my mail. 2002FebSpam > has about 1000 messages in it,

Re: [SAtalk] alternate configs through spamc

2002-03-05 Thread Craig Hughes
On 3/5/02 4:25 PM, "Richard Sonnen" <[EMAIL PROTECTED]> wrote: > It might be useful to set up spamc and spamd so that you could > specify alternate config files more easily. i.e. > > spamc --cf /path/to/system/conf/dir --rf /path/to/user/rules > > The flags (if present) would be passed on to s

[SAtalk] Re: Another English-centric rule

2002-03-05 Thread Daniel Pittman
On Tue, 5 Mar 2002, dman wrote: > On Tue, Mar 05, 2002 at 12:48:53PM -0800, Daniel Quinlan wrote: [...] >| Actually, iso-8859-1 is for English. > > It is for Western Europe. US-ASCII is a proper subset of all the ISO > and UTF-8. It's also worth noting that Microsoft products regularly announ

Re: [SAtalk] Quiet

2002-03-05 Thread Craig Hughes
Try perldoc Mail::SpamAssassin::Conf C On 3/5/02 3:41 PM, "Juan F. Codagnone" <[EMAIL PROTECTED]> wrote: > (cc me. i'm not in the list) > > I don't want spamassassin to modify (write any report) in the body of the > mail (i want't only to add the headers). I searched for any option and i > did

[SAtalk] how to take care of false positives?

2002-03-05 Thread Ricardo Kleemann
Hi, I have a message from a mailing list which spamassassin flags as spam, however it is not. How can I handle that? Ricardo ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

[SAtalk] Automatic WHITElist?

2002-03-05 Thread Duncan Findlay
I was just thinking, perhaps we should change the name of the "automatic whitelist." In my experience, it seems to be a pretty good blacklist too :-) -- Duncan Findlay ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/

[SAtalk] NEW_DOMAIN_EXTENSIONS improvement

2002-03-05 Thread Matthew Cline
The current NEW_DOMAIN_EXTENSIONS didn't catch the last bit of doamin registry spam I got. body NEW_DOMAIN_EXTENSIONS /new\s*domain\s*extension/i The word "Internet" was inserted between "new" and "domain", so the rule wasn't triggered. This rule catches both variants: body NEW_DOMAIN_EX

Re: [SAtalk] spamassassin and qmail.

2002-03-05 Thread Rick Macdougall
Hi, What are you using as your backend? Straight qmail or vmailmgr or vpopmail? qmail expects a seekable pipe from any program output so you may need filepipe (www.nougen.com/test/filepipe.tgz) or the seekable patch to vpopmail's vdeliver (www.gallowglass.com or something similar). With vmailm

Re: [SAtalk] Another English-centric rule

2002-03-05 Thread dman
On Tue, Mar 05, 2002 at 12:48:53PM -0800, Daniel Quinlan wrote: | Matthew Cline <[EMAIL PROTECTED]> writes: | | > For those of you who find that English-centricity helps to filter spam, | > here's a rule that looks for non-ASCII encoding in the subject line: | > | > header NON_ASCII_ENC_SUBJ

[SAtalk] China: Lawmakers protest e-mail blocks

2002-03-05 Thread Rob McMillin
http://news.com.com/2100-1023-850761.html -- [EMAIL PROTECTED] | Dog is my co-pilot. ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Re: [SAtalk] Another English-centric rule

2002-03-05 Thread Matthew Cline
On Tuesday 05 March 2002 07:23 am, Rob McMillin wrote: > Already exists -- see CHARSET_FARAWAY_HEADERS. Ooops, didn't realize it did that. Guess I should read all of EvalTest.pm before submitting new rules... -- Visit http://dmoz.org, the world's | Give a man a match, and he'll be warm lar

[SAtalk] alternate configs through spamc

2002-03-05 Thread Richard Sonnen
An off-list discussion of the SA config process brought up an unrelated good idea that I'm passing along: It might be useful to set up spamc and spamd so that you could specify alternate config files more easily. i.e. spamc --cf /path/to/system/conf/dir --rf /path/to/user/rules The flags (if

[SAtalk] HUNZA_DIET_BREAD

2002-03-05 Thread Daniel Rogers
It seems that part of the reason that the HUNZA_DIET_BREAD doesn't seem to be doing anything is that they've changed their message around so the rule doesn't match any more. Here's part of the message that was received a couple weeks ago: --- Hunza Bread Home made Hunza Bread is a simple, delic

[SAtalk] SUBJ_ALL_CAPS

2002-03-05 Thread Daniel Rogers
I just noticed that SUBJ_ALL_CAPS matches on a blank subject. Is this intentional? Should it maybe be rewritten as: Subject =~ /^[^a-z]+$/ instead of Subject =~ /^[^a-z]*$/ ? (Would that even work?) Dan. ___ Spamassassin-talk mailing list [EMAIL P

[SAtalk] Quiet

2002-03-05 Thread Juan F. Codagnone
(cc me. i'm not in the list) I don't want spamassassin to modify (write any report) in the body of the mail (i want't only to add the headers). I searched for any option and i didn't find anything. I tried to use clear-report-template as report but i get SPAM: (no report template found) I com

[SAtalk] spamassassin and qmail.

2002-03-05 Thread Brook Humphrey
I have it working kind of. I can actually filter the emails through spamassassin ok using the .qmail file but spamassassin is not taging any of the emails. I have tried both |spamassassin -P and |spamc both pass the email back to qmail but do not actually filter the email in any way. Any other c

Re: [SAtalk] Distributed Checksum Clearinghouse

2002-03-05 Thread Scott Doty
On Tue, Mar 05, 2002 at 01:20:46PM -0800, Scott Doty wrote: > > I wasn't aware that nilsimsa required one to check against all the > hashes in the database. I take it there's no way to index the hashes > to speed up matches? (e.g., maybe only check hashes that have approximately > the same numb

Re: [SAtalk] Conf.pm RFC

2002-03-05 Thread Greg Ward
On 05 March 2002, Richard Sonnen said: > I've got an idea for making the SpamAssassin configuration process > more flexible, and I'd love to hear your suggestions and comments > before I jump in and make a mess of the code ;-) I'm in favour of making it more flexible, and I don't care about SQL

Re: [SAtalk] Distributed Checksum Clearinghouse

2002-03-05 Thread Rose, Bobby
This relates to what's been discussed on the razor & dcc issue. I may provide people in this list an idea of where Vipul's going since someone mentioned that they weren't certain on the project status for razor. -Original Message- From: Vipul Ved Prakash [mailto:[EMAIL PROTECTED]] Sent

Re: [SAtalk] Speed

2002-03-05 Thread Duncan Findlay
On Tue, Mar 05, 2002 at 11:17:09AM -0800, Craig Hughes wrote: > On Tue, 2002-03-05 at 09:35, Matt Sergeant wrote: > > On Tue, 5 Mar 2002, Yevgeniy Miretskiy wrote: > > > > > The question is: why do I need to run all tests if I'm running spamassassin with >-L flag? > > > > Again, sorry if this t

[SAtalk] Conf.pm RFC

2002-03-05 Thread Richard Sonnen
I've got an idea for making the SpamAssassin configuration process more flexible, and I'd love to hear your suggestions and comments before I jump in and make a mess of the code ;-) I'm in the process of deploying SpamAssassin on a distributed mail farm. The farm environment causes a number of

Re: [SAtalk] Distributed Checksum Clearinghouse

2002-03-05 Thread Scott Doty
On Tue, Mar 05, 2002 at 09:14:18AM +, Matt Sergeant wrote: > On Mon, 4 Mar 2002, Scott Doty wrote: > > One of our senior system administrators, Kelsey, has had contact with Vipul > > -- I understand Vipul is working on incorporating "fuzzy" hashes into Razor > > using the nilsimsa algorithm.

Re: [SAtalk] Another English-centric rule

2002-03-05 Thread Daniel Quinlan
Matthew Cline <[EMAIL PROTECTED]> writes: > For those of you who find that English-centricity helps to filter spam, > here's a rule that looks for non-ASCII encoding in the subject line: > > header NON_ASCII_ENC_SUBJ Subject =~ /=\?(?:euc-kr|big5|iso-8859-1)\?/ > describe NON_ASCII_ENC_SUBJ

Re: [SAtalk] Another English-centric rule

2002-03-05 Thread Rob McMillin
Matthew Cline wrote: >On Tuesday 05 March 2002 02:08 am, I wrote: > >>header NON_ASCII_ENC_SUBJ Subject =~ >>/=\?(?:euc-kr|big5|iso-8859-1)\?/ >> > >Actually: > >header NON_ASCII_ENC_SUBJ Subject =~ /=\?(?:euc-kr|big5|iso-8859-1)\?/i > >as it needs to be case insensitive. > Already ex

Re: [SAtalk] A Front Page rule?

2002-03-05 Thread Craig Hughes
I agree it looks good -- adding it now: rawbody FRONTPAGE /FrontPage.Editor/ describe FRONTPAGE FrontPage used to create message score FRONTPAGE 2.00 I'll let the GA score it on the next run, but I see similar ratios in the corpus at a glance. C On Tue, 2002-03-05 at 11:17, rODbegbie wrote: >

Re: [SAtalk] A Front Page rule?

2002-03-05 Thread rODbegbie
Quoting Kerry Nice <[EMAIL PROTECTED]>: > Just out of curiousity, I looked quickly though my > mail.2002FebSpam has about 1000 messages in it, it > tagged like 6% of them. In the rest of my email, > which covers a number of years, out of those 8 extra, > 5 of them were webpages I mailed to m

Re: [SAtalk] Speed

2002-03-05 Thread Craig Hughes
On Tue, 2002-03-05 at 09:35, Matt Sergeant wrote: > On Tue, 5 Mar 2002, Yevgeniy Miretskiy wrote: > > > The question is: why do I need to run all tests if I'm running spamassassin with >-L flag? > > Again, sorry if this topic was beaten to death before... > The problem is that some of the scor

[SAtalk] A Front Page rule?

2002-03-05 Thread Kerry Nice
Is Front Page ever used in non-spam. Would a check for some of these things be useful? At least as the beginning of a message, possibly somebody might send an attached page with some of this stuff in it. UUnleaded Gasoline Just out of curiousity, I looked quickly though my mail.2002Feb

Re: [SAtalk] Sightings Problem

2002-03-05 Thread Donald L. Greer, Jr.
Great! Then I can use the script I got from SpamCop (http://spamcop.net/reporter.pl). Don - Original Message - From: "Craig Hughes" <[EMAIL PROTECTED]> To: "Donald Greer" <[EMAIL PROTECTED]> Cc: "spamassassin-talk" <[EMAIL PROTECTED]> Sent: Monday, March 04, 2002 7:57 PM Subject: Re:

RE: [SAtalk] Combined subject and body tests?

2002-03-05 Thread Michael Moncur
> I'd agree with this. Maybe a body/subject test? One that I've seen > recently was mentioning Viagra in the subject, but only talking about their > 'online pharmacy' in the body. This seems a bit off to me - shouldn't they be separate tests? It seems like "viagra" in the subject should be wort

Re: [SAtalk] Combined subject and body tests?

2002-03-05 Thread Daniel Rogers
On Tue, Mar 05, 2002 at 01:28:20AM -0800, Matthew Cline wrote: > There's some body tests that would also work for the subject, like the > CASHCASHCASH test, and I've seen some spam were the tests didn't match the > body but would have matched the subject. Would it be worth it to make a > body_

Re: [SAtalk] Speed

2002-03-05 Thread Matt Sergeant
On Tue, 5 Mar 2002, Yevgeniy Miretskiy wrote: > Hello everybody, > > I'm new to the list so please excuse me if this topic was beaten to death... > > I'm very impressed with spam assassin acuracy in spam detection, however > it is not as fast as I wish it was (which is very much understandable gi

[SAtalk] Speed

2002-03-05 Thread Yevgeniy Miretskiy
Hello everybody, I'm new to the list so please excuse me if this topic was beaten to death... I'm very impressed with spam assassin acuracy in spam detection, however it is not as fast as I wish it was (which is very much understandable given that spamassassin is written in perl and uses huge nu

Re: [SAtalk] A better alternative to test ROUND_THE_WORLD]

2002-03-05 Thread Bill Becker
People should be allowed to not-read or not-receive any or all of their email. Period. It doesn't matter whether it's because they are xenophobic morons, or because they don't know anyone outside the US -- It doesn't matter because it's their mail and their spool. On Sat, 2 Mar 2002, Rob McMil

Re: [SAtalk] Another English-centric rule

2002-03-05 Thread dman
On Tue, Mar 05, 2002 at 02:08:39AM -0800, Matthew Cline wrote: | For those of you who find that English-centricity helps to filter spam, | here's a rule that looks for non-ASCII encoding in the subject line: | | header NON_ASCII_ENC_SUBJ Subject =~ /=\?(?:euc-kr|big5|iso-8859-1)\?/ | descr

Re: [SAtalk] razor gone haywire?

2002-03-05 Thread dman
On Tue, Mar 05, 2002 at 09:37:37AM +, Christof Damian wrote: | On Tue, 05 Mar 2002, dman wrote: | > Subject: test message | > | > hi | > . | > 250 OK id=16i79G-0005YP-00 | > | > | > When this arrived, it was hit by RAZOR_CHECK. Can anyone offer an | > explantion for why this message would

RE: [SAtalk] How to use check_whitelist?

2002-03-05 Thread Tony Hoyle
> -Original Message- > From: Olivier Nicole [mailto:[EMAIL PROTECTED]] > Sent: 05 March 2002 01:51 > To: Tony Hoyle > Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: RE: [SAtalk] How to use check_whitelist? > > > Tony, > > There are 3 or 4 versions of DB out in the wild, some quite

Re: [SAtalk] Another English-centric rule

2002-03-05 Thread Matthew Cline
On Tuesday 05 March 2002 02:08 am, I wrote: > header NON_ASCII_ENC_SUBJ Subject =~ > /=\?(?:euc-kr|big5|iso-8859-1)\?/ Actually: header NON_ASCII_ENC_SUBJ Subject =~ /=\?(?:euc-kr|big5|iso-8859-1)\?/i as it needs to be case insensitive. -- Visit http://dmoz.org, the world's | G

[SAtalk] Another English-centric rule

2002-03-05 Thread Matthew Cline
For those of you who find that English-centricity helps to filter spam, here's a rule that looks for non-ASCII encoding in the subject line: header NON_ASCII_ENC_SUBJ Subject =~ /=\?(?:euc-kr|big5|iso-8859-1)\?/ describe NON_ASCII_ENC_SUBJ Non-ASCII encoded subject It just does EUC Ko

Re: [SAtalk] razor gone haywire?

2002-03-05 Thread Christof Damian
On Tue, 05 Mar 2002, dman wrote: > Subject: test message > > hi > . > 250 OK id=16i79G-0005YP-00 > > > When this arrived, it was hit by RAZOR_CHECK. Can anyone offer an > explantion for why this message would be in razor's database? probably someone else used it for testing razor. other small

[SAtalk] Combined subject and body tests?

2002-03-05 Thread Matthew Cline
There's some body tests that would also work for the subject, like the CASHCASHCASH test, and I've seen some spam were the tests didn't match the body but would have matched the subject. Would it be worth it to make a body_subject test which would add the subject to the body before running the

[SAtalk] Undetected spam - Convite Especial

2002-03-05 Thread Nigel Metheringham
For whatever reason I'm now getting Brasilian spam... Looks to me as though the last paragraph - I assume its quoting some spam friendly statute - could have some good things to match on. Nigel. -- [ Nigel Metheringham [EMAIL PROTECTED] ] [ Phone: +44 1423 85

Re: [SAtalk] Distributed Checksum Clearinghouse

2002-03-05 Thread Matt Sergeant
On Mon, 4 Mar 2002, Scott Doty wrote: > On Mon, Mar 04, 2002 at 02:29:14PM -0500, Rose, Bobby wrote: > > I've perused the razor list archives and my take is that they will > > release the server daemon once they deal with the trust issues. They > > don't want to have spammers setup a server and

Re: [SAtalk] Rule idea: "real name" == local part

2002-03-05 Thread Matt Sergeant
On Mon, 4 Mar 2002, Greg Ward wrote: > On 04 March 2002, Matt Sergeant said: > > "Dear matt" > > But your local part is "msergeant", I just checked! How much real mail > do you get that says "Dear msergeant"? That's work email (where I don't care about spam that much) - home is matt @ sergeant.