[SAtalk] spamassassin won't tag subject

2002-11-19 Thread Mark Olton
Hello, I'm using spamassassin together with MIMEDefang, and it seems to be working properly in that it is able to properly identify spam and mark up the headers accordingly, but the problem is I can not get it to tag the header. I have rewrite_subject set to 1 in

Re: [SAtalk] Bayesian attack

2002-11-19 Thread Matt Sergeant
Christopher Eykamp said the following on 18/11/02 23:15: Hello, I've implemented a Bayesian filtering scheme on my system that runs concurrent with SpamAssassin. It works really well, but I am starting to think there is an easy attack that would render the filtering useless. What if, at the

Re: [SAtalk] Re: Spammer forums?

2002-11-19 Thread Matt Sergeant
David Masterson said the following on 18/11/02 20:31: Matt Sergeant writes: Matthew Cline said the following on 16/11/02 03:14: Anyone know some forums or mailing lists where spammers discuss their trade? I'd like to take a look at some of them, just out of curiosity. There's

RE: [SAtalk] Trouble with paths

2002-11-19 Thread Kim Leandersson
-Original Message- From: Klaus Heinz [mailto:[EMAIL PROTECTED]] Sent: Tuesday, November 19, 2002 2:53 AM To: [EMAIL PROTECTED] Subject: Re: [SAtalk] Trouble with paths Philip Mak wrote: perl -MCPAN -eshell install Time::HiRes I would not recommend to use the CPAN shell

Re: [SAtalk] Kmail spamassassin.

2002-11-19 Thread Gregor Hlawacek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am Dienstag, 19. November 2002 00:49 schrieb Matthew Cline: On Monday 18 November 2002 12:53 pm, Erik Jakobsen wrote: Hi. I use Kmail here on a SuSE 8.1 system. These days I'm trying to set up a spamassassin. Is it necessary to run

Re: [SAtalk] Kmail spamassassin.

2002-11-19 Thread Matthew Cline
On Tuesday 19 November 2002 02:02 am, Gregor Hlawacek wrote: But here comes an other ineteresting question regarding kmail. How can I use kmail with SA on an IMAP account. There seem to be some restriction on automated filtering of IMAP Mailboxes and the possbility to move mails between

Re: [SAtalk] spamassassin won't tag subject

2002-11-19 Thread Nancy McGough
On 19 Nov 2002 Mark Olton ([EMAIL PROTECTED]) wrote: I'm using spamassassin together with MIMEDefang, and it seems to be working properly in that it is able to properly identify spam and mark up the headers accordingly, but the problem is I can not get it to tag the header. I have

Re: [SAtalk] Bayesian filter effectiveness

2002-11-19 Thread Justin Mason
[EMAIL PROTECTED] said: How effective is the new bayesian filter on a site-wide installation? Depends on your users ;) If they all talk about the same stuff, quite good; if they're totally diverse, it won't be as good. But I would say the worst accuracy rating would probably be about 80%

Re: [SAtalk] Bayesian attack

2002-11-19 Thread Ross Vandegrift
On Tue, Nov 19, 2002 at 09:39:13AM +, Matt Sergeant wrote: The spammers have. An even better way they've found is to include a snippet from a legit mailing list, but put it in a white text on white background box. This was discussed on the spambayes mailing list. Now, I am not a

Re: [SAtalk] Bayesian attack

2002-11-19 Thread Matt Sergeant
Ross Vandegrift said the following on 19/11/02 14:17: On Tue, Nov 19, 2002 at 09:39:13AM +, Matt Sergeant wrote: The spammers have. An even better way they've found is to include a snippet from a legit mailing list, but put it in a white text on white background box. This was discussed on

Re: [SAtalk] Bayesian attack

2002-11-19 Thread Bob Apthorpe
Hi, On Tue, 19 Nov 2002 14:26:51 GMT, Matt Sergeant wrote: Ross Vandegrift said the following on 19/11/02 14:17: If the Bayseian analysis actaully takes into account the joint and conditional densities of word frequency, and it has a reasonable way to assign an expectation to them (ie, if

[SAtalk] Server Load

2002-11-19 Thread Keith Olmstead
Hello, A quick question. After doing some reading, I noticed alot ppl have SA running on Intel boxes. Is anyone running SA on Solaris boxes? Will be processing about 600k emails/day on one mail server and was wondering how it would fair. It is a Sun V880 with dual 700 sparc cpu and 4 gig of

Re: [SAtalk] Server Load

2002-11-19 Thread Jeff Engelhardt
Keith Olmstead wrote: Hello, A quick question. After doing some reading, I noticed alot ppl have SA running on Intel boxes. Is anyone running SA on Solaris boxes? Will be processing about 600k emails/day on one mail server and was wondering how it would fair. It is a Sun V880 with dual 700

Re: [SAtalk] Bayesian attack

2002-11-19 Thread Sean Redmond
Bob Apthorpe wrote: corpi (sp?) The plural is corpora :-) -- Sean Redmond BMA Information Systems smime.p7s Description: S/MIME Cryptographic Signature

Re: [SAtalk] Bayesian attack

2002-11-19 Thread Matt Sergeant
Bob Apthorpe said the following on 19/11/02 15:54: First, start with Larry Gonick's fantastic The Cartoon Guide To Statistics: http://www.powells.com/cgi-bin/biblio?inkey=7-0062731025-0 I shall try and get hold of that :-) [OT: I have the Cartoon History of Time, which looks similar in it's

Re: [SAtalk] Bayesian attack

2002-11-19 Thread Justin Mason
Matt Sergeant said: OK, I think I now understand, but I still think there's an attack here. Imagine you tally where you got the email from with the text you take to defeat the filter? So you farm addresses from the mod_perl list at mail-archive.org, and the bayesian filter text is also

Re: [SAtalk] Server Load

2002-11-19 Thread Matt Sergeant
Keith Olmstead said the following on 19/11/02 16:11: Hello, A quick question. After doing some reading, I noticed alot ppl have SA running on Intel boxes. Is anyone running SA on Solaris boxes? Will be processing about 600k emails/day on one mail server and was wondering how it would fair.

[SAtalk] Catch ALL

2002-11-19 Thread Dev
Im using vpopmail with maildrop and spamassassin how do i setup a catch-all ? you normally just edit .qmail-default and add | maildrop for every user to check emails for spam but what if it is a catch-all domain? or user for that matter? ---

[SAtalk] A little help with installation

2002-11-19 Thread Jerry Rasmussen
I want to install SA. I have installed only once before following a guide I found on the internet. I am looking for instructions on setting up SA so that it will mark something as being spam and then send to the intended recipient with out changing the body of the email. I was hoping someone

Re: [SAtalk] spamassassin won't tag subject

2002-11-19 Thread Vince Hoang
On Tue, Nov 19, 2002 at 12:09:30AM -0800, Mark Olton wrote: I'm using spamassassin together with MIMEDefang, and it seems to be working properly in that it is able to properly identify spam and mark up the headers accordingly, but the problem is I can not get it to tag the header. I have

Re: [SAtalk] A little help with installation

2002-11-19 Thread Jerry Rasmussen
Would I use the same setup if I wanted to use this as a front-end server that relays mail to the exchange mail server. If it were set up in this fashion would SpamAssassin still work? - Original Message - From: Steve Thomas [EMAIL PROTECTED] To: Jerry Rasmussen [EMAIL PROTECTED]; [EMAIL

RE: [SAtalk] A little help with installation

2002-11-19 Thread Steve Thomas
| I want to install SA. I have installed only once before | following a guide I | found on the internet. I am looking for instructions on setting up SA so | that it will mark something as being spam and then send to the intended | recipient with out changing the body of the email. I was hoping

Re: [SAtalk] Re: Spammer forums?

2002-11-19 Thread David Masterson
Matt Sergeant writes: David Masterson said the following on 18/11/02 20:31: Matt Sergeant writes: Matthew Cline said the following on 16/11/02 03:14: Anyone know some forums or mailing lists where spammers discuss their trade? I'd like to take a look at some of them, just out of

Re: [SAtalk] Server Load

2002-11-19 Thread Keith Olmstead
Yeah testing will be done pretty heavily before put into production. Also this product might not work under our load. That is where the testing comes in. I was courious to see what type of load I could expect, it does not look good from what I am hearing. I am still in the planning stage of

RE: [SAtalk] A little help with installation

2002-11-19 Thread Steve Thomas
For that you'd need one of the milter solutions out there. I've never used a milter that incorporates SA, so you'll have to look around. I hear that MIME-Defang works well with SA. Others on the list will probably be able to put in their two cents on which milter works best for a relay-only

Re: [SAtalk] AWL settings in user_prefs

2002-11-19 Thread Matt Kettler
Yes, I know about that issue with a global AWL. I've even authored some of the posts discussing how horribly the AWL performs when there's a global database. So yes, I understand how the AWL smears your all_spam_to scores all over the place and causes problems. I understand this and the

[SAtalk] Razor and Spamassassin

2002-11-19 Thread Brian Chaffins
I installed Razor2 and it appears to be functioning properly. I am and have been running Spamassassin 2.43 for sometime now. My debug logs show: Nov 19 14:55:06 trillian spamd[1037]: debug: Razor2 is available Nov 19 14:55:06 trillian spamd[1037]: debug: entering helper-app run mode Nov 19

Re: [SAtalk] Bayesian attack

2002-11-19 Thread Ross Vandegrift
On Tue, Nov 19, 2002 at 05:14:46PM +, Justin Mason wrote: I notice the bayes-busting spam posted on spambayes used linuxy text. That probably works quite well given the current bayes userset ;) Ah, that's friggin genius! And it's almost a perfectly crafted attack on Bayes-like

Re: [SAtalk] A little help with installation

2002-11-19 Thread dogface
i have found that large emails kill SA's performance. adding * 256000 to the .procmailrc bypasses anything larger that 256k, thus speeding up the delivery process. i have not ever received a spam that was larger than 256k. :0fw * 256000 | spamassassin -P snip 3. In each user's .procmailrc

Re: [SAtalk] Bayesian attack

2002-11-19 Thread Ross Vandegrift
On Tue, Nov 19, 2002 at 09:54:13AM -0600, Bob Apthorpe wrote: What does joint and conditional frequency analysis mean? First, start with Larry Gonick's fantastic The Cartoon Guide To Statistics: http://www.powells.com/cgi-bin/biblio?inkey=7-0062731025-0 Being neither a mathematician nor a

Re: [SAtalk] spamassassin won't tag subject

2002-11-19 Thread Mark Olton
I currently have rewrite_subject set to 1 and subject tag is [SPAM], but it still won't tag the message. I get the report in the body indicating it is spam, but no tagged subject. Mark On Tue, 2002-11-19 at 02:30, Nancy McGough wrote: On 19 Nov 2002 Mark Olton ([EMAIL PROTECTED]) wrote:

Re: [SAtalk] Bayesian attack

2002-11-19 Thread Vivek Khera
RV == Ross Vandegrift [EMAIL PROTECTED] writes: RV On Tue, Nov 19, 2002 at 05:14:46PM +, Justin Mason wrote: I notice the bayes-busting spam posted on spambayes used linuxy text. That probably works quite well given the current bayes userset ;) RV Ah, that's friggin genius! And it's

RE: [SAtalk] A little help with installation

2002-11-19 Thread Steve Thomas
| i have found that large emails kill SA's performance. | adding * 256000 to the .procmailrc bypasses anything | larger that 256k, thus speeding up the delivery process. | i have not ever received a spam that was larger than 256k. Right - forgot about that condition. I use spamc/d, which ignores

[SAtalk] Spamassassin maildrop

2002-11-19 Thread Dev
Is there a way to add to the beginning of the Subject: *SPAM* original subject SPAM to the beginning of the subject and keep original subject intact? Dev. --- This sf.net email is sponsored by: To learn the basics of securing your web site

Re: [SAtalk] Bayesian attack

2002-11-19 Thread Sean Redmond
Ross Vandegrift wrote: On Tue, Nov 19, 2002 at 05:14:46PM +, Justin Mason wrote: I notice the bayes-busting spam posted on spambayes used linuxy text. That probably works quite well given the current bayes userset ;) Ah, that's friggin genius! And it's almost a perfectly crafted

Re: [SAtalk] Kmail spamassassin.

2002-11-19 Thread Gregor Hlawacek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am Dienstag, 19. November 2002 11:03 schrieb Matthew Cline: On Tuesday 19 November 2002 02:02 am, Gregor Hlawacek wrote: But here comes an other ineteresting question regarding kmail. How can I use kmail with SA on an IMAP account. There seem to

[SAtalk] Razor and SpamAssassin

2002-11-19 Thread Mark R. Cervarich
On the front page of, http://www.spamassassin.org/ spam-idendification tactics are said to include: * Razor: Vipul's Razor I have Razor running as well as SpamAssassin. Procmail filters SpamAssassin caught mail into 1 folder and Razor mail into another (see snippet of my

Re: [SAtalk] Razor and SpamAssassin

2002-11-19 Thread Rich Duzenbury
Try running the sample spam in the distribution. cat sample-spam.txt | spamc A working spamassassin / razor finds sample spam in the razor database, the RAZOR2_CHECK rule shows up on the sample message over here when I run it. My question is -- at what point does SpamAssassin use Razor?

Re: [SAtalk] Razor and SpamAssassin

2002-11-19 Thread Mark R. Cervarich
When I try this as myself (a normal user called mark): cat /root/.cpan/build/Mail-SpamAssassin-2.01/sample-spam.txt | spamc | more Here are the interesting lines: X-Spam-Status: Yes, hits=32.1 required=7.0 tests=UNDISC_RECIPS,FROM_HAS_MIXED_NUMS,MSGID_HAS_NO_AT,

Re: [SAtalk] Razor and SpamAssassin

2002-11-19 Thread Mark R. Cervarich
On Tue, 19 Nov 2002, Mark R. Cervarich wrote: So, thinking out loud, is Razor not getting used because of the systemwide use of SpamAssasin? Or is there some other reason. I temporarily changed my spamd options to include -D and saw these messages: Nov 19 15:48:36 ns spamd[16104]:

Re: [SAtalk] Spamassassin maildrop

2002-11-19 Thread Matt Kettler
Erm, I'm not sure what you're asking here. I can't make much sense of the original message. The closest wild guess is Is there a way to add to the beginning of the subject line *SPAM* and keep the rest of the original subject intact?. The answer to that question is that's more-or-less what

Re: [SAtalk] Razor and SpamAssassin

2002-11-19 Thread Matt Kettler
Actually the only one you will likely see is RAZOR2_CHECK. RAZOR_CHECK is only called if you have razor v1.x installed, RAZOR2_CHECK is only run if you have razor 2.x installed. You'll only see both if you've downloaded and installed both razor 1.x and razor 2.x. Razor should be called by

[SAtalk] [NEWBIE]Spamassassin Update

2002-11-19 Thread Dirk Trompetter
Hi, I currently use SuSE 8.1 with spamassassin version 2.31 and KMail. Where can I get an new blacklist and where do I have to save this list? Should I install the new version of spamassassin? Regards, Dirk -- --- [EMAIL PROTECTED] ---

RE: [SAtalk] Bayesian filter effectiveness

2002-11-19 Thread francisv
Thanks Jim, will be waiting for the 2.5 release. I'm happy with the current version now :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, November 19, 2002 8:17 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] Bayesian filter