Re: [SAtalk] I hate SpamAssassin

2003-05-30 Thread butrus orman
i luv it, it has been working flawless for me using suse 8.2 --- This SF.net email is sponsored by: eBay Get office equipment for less on eBay! http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5

Re: [SAtalk] sa-learn on messages from outlook/exchange

2003-05-30 Thread Kai Schaetzl
John Stewart wrote on Wed, 28 May 2003 16:09:05 -0500: You want the headers! Bayes uses these. That's correct, but if you look at a spamassassin -D output you see that the header information usually plays a marginal role. From a typical message you may have 1 - 3 matches in the headers but

[SAtalk] Cannot open bayes_path?

2003-05-30 Thread Paul Hutchings
Search on sourceforge appears totally screwed.. Every so often I see this in my maillog - May 18 07:42:06 relay spamd[18036]: Cannot open bayes_path /home/filter/.spamassassin/bayes R/W: File exists May 18 07:42:06 relay spamd[18036]: identified spam (50.0/5.0) for filter:500 in 11.6 seconds,

Re: [SAtalk] 2.53 vs 2.55

2003-05-30 Thread Richard Hopkins
--On Thursday, May 29, 2003 11:33 AM +1200 Simon Byrnand [EMAIL PROTECTED] wrote: At 10:40 28/05/03 -0400, Jack Gostl wrote: I just upgraded from 2.53 to 2.55. Was there some discussion awhile back about 2.55 having a problem with RBL? No, It's just that by an extremely annoying

RE: [SAtalk] Worried about RBLs

2003-05-30 Thread Michael J. Kidd
Thanks! I really appreciate all the feedback. My blacklist is ever growing.. I run qmail, and I look at the queues every morning.. The biggest issue is that one of the domains hosted on my system used to have free webmail hosting via Everyone.net ... HUGE mistake! They obviously sell the email

RE: [SAtalk] qmail+vpopmail suggestion

2003-05-30 Thread Shayne Lebrun
Another vote for qmail-qmailscanner-vpopmail. I use spamc in qmail-scanner, looking up against SQL for user prefs, and a maildrop script, if the user desires, to drop their tagged spam into the TRASH IMAP folder; if they pop their mail, they never see it, if they IMAP it, they can get it if they

Re: [SAtalk] controlling expiry for site-wide bayes dbs

2003-05-30 Thread Mark Martinec
| BTW, good news for large site-wide bayes dbs: Theo has implemented a way | to avoid auto-expiry in 2.60. The plan is that expiry can be disabled by | setting bayes_expiry_max_db_size to 0. | | Then folks who wish to do an expiry from cron, can control this by using | a config file which uses

RE: [SAtalk] Best way to process the log?

2003-05-30 Thread Tony Earnshaw
ons, 28.05.2003 kl. 16.02 skrev Tom Meunier: I think I know what he means, because I've considered the same thing myself, for a moment or two. He wants to parse his maillog file to throw away everything but the processing message message_id and the identified spam lines. Then he can go

RE: [SAtalk] Best way to process the log?

2003-05-30 Thread Tony Earnshaw
ons, 28.05.2003 kl. 16.45 skrev DEFFONTAINES Vincent: I'd like to help, since no-one answered, you're Dutch (sniff, sniff Nobody loves me) and anyway I've been through the whole gamut of learning Postscript and SA, from filter to spampd to amavisd-new. I can make SA-Exim 4 work

Re: [SAtalk] whitelisting not working

2003-05-30 Thread Tony Earnshaw
ons, 28.05.2003 kl. 16.39 skrev Maciek J. Maciak: What *Amavis* version are you using? Because that's the thing that's lousing your rules up. Chances are that that's an old version too - grab the newest release. If I may ask, how exactly is amavis looking at the rulesets for sa ? I

Re: [SAtalk] On filtering out invalid tags, decode %-characters,canoncial input

2003-05-30 Thread Tony Earnshaw
tor, 29.05.2003 kl. 00.53 skrev Simon Byrnand: I said: keep your SA version up to date. I.e., don't winge if you're using 2.54 and the current version is 2.55. Least of all if you're still running 2.43. Sure, but what relevance does saying What you write above certainly isn't the case for

Re: [SAtalk] Worried about RBLs

2003-05-30 Thread Mark
- Original Message - From: Michael J. Kidd [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, May 29, 2003 3:19 PM Subject: RE: [SAtalk] Worried about RBLs I can't for the life of me get anything to take that I put in the config files... I tried putting it in

RE: [SAtalk] Spam nstallingassasin

2003-05-30 Thread Vivek Khera
SL == Shayne Lebrun [EMAIL PROTECTED] writes: SL nslookup relays.monkeys.com SL Server: black.MUSKOKA.COM SL Address: 216.123.107.2 SL Name:relays.monkeys.com SL Relays.monkeys.com doesn't currently have an IP addy assigned to it, looks SL like. Which has nothing to do with looking up

Re: [SAtalk] Worried about RBLs

2003-05-30 Thread Frank Chibesakunda
How do you instal sapmassasin, am very new to unix platform so a step by step procedure will help frank - Original Message - From: Mark [EMAIL PROTECTED] To: Michael J. Kidd [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Thursday, May 29, 2003 3:24 PM Subject: Re: [SAtalk] Worried about

[SAtalk] Advice Please

2003-05-30 Thread Ron McKeating
Why would an ordinary innocent email user be base 64 encoding their ordinary text. And why does it get such a big score. Here is the points awarded HTML_50_60 (2.1 points) BODY: Message is 50% to 60% HTML HTML_MESSAGE (1.1 points) BODY: HTML included in message BASE64_ENC_TEXT

Re: [SAtalk] Cannot open bayes_path?

2003-05-30 Thread Theo Van Dinter
On Thu, May 29, 2003 at 01:47:52PM +0100, Paul Hutchings wrote: Any ideas? Looks like the message is still being scanned/tagged, just not sure what it's trying to tell me. It's telling you that it couldn't get a lock on the DB (aka: autolearning). -- Randomly Generated Tagline: If God didn't

RE: [SAtalk] User_prefs without local users?

2003-05-30 Thread Upwood, James
I did exactly what your URL suggests in the sql/README, but it assumes that you still have local users or at least local user accounts. I ran the test and looked at the output of spamd and it isn't even querying the DB :( Here is my config: /etc/mail/spamassassin/local.cf # This is the right

RE: [SAtalk] User_prefs without local users?

2003-05-30 Thread Shayne Lebrun
You need to run spamd with a flag to use sql prefs; -q as I recall. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Upwood, James Sent: Thursday, May 29, 2003 10:04 AM To: Andreas Haase; SpamAssassin Subject: RE: [SAtalk] User_prefs without local

Re: [SAtalk] Worried about RBLs

2003-05-30 Thread listuser
On Thu, 29 May 2003, Bob Apthorpe wrote: HI, On Wed, 28 May 2003 22:52:32 -0500 (CDT) [EMAIL PROTECTED] wrote: In short, yes there are a lot of ignorant people that look no farther than the From: line. Fortunately DNSBL maintainers are stupid enough to let a single (l)user dictate

Re: [SAtalk] Worried about RBLs

2003-05-30 Thread Vivek Khera
BA == Bob Apthorpe [EMAIL PROTECTED] writes: BA ... DNSBL maintainers are _not_ stupid enough ... BA Or are you vaguely referring to SpamCop's busticated statistics and BA unwillingness to remove obviously broken listings in a timely manner BA when notified? IIRC, it doesn't take much to

RE: [SAtalk] Cannot open bayes_path?

2003-05-30 Thread Paul Hutchings
hmm.. is that relatively normal, say if there's a couple of accesses going on at the same time? It doesn't appear particularly often in the logs, only noticed it when I happened to be tailing it to check some changes were working as planned (and yes, it does appear prior to the changes :-)

Re: [SAtalk] Advice Please

2003-05-30 Thread Michael Sims
Quoting Ron McKeating [EMAIL PROTECTED]: Why would an ordinary innocent email user be base 64 encoding their ordinary text. And why does it get such a big score. Here is the points awarded [...] This really was an innocent user from a local council. What on earth could they have set on their

[SAtalk] Update on debugging external test problems...

2003-05-30 Thread Mark Thornton
We have resolved our external tests problem by installing the djbdns caching dns server (http://cr.yp.to/djbdns.html) on the amavisd/spamassassin relay server. Prior to installation the log was showing TIMING reports of ranging from 1 to 5 ms, with the average being about 18000 ms. If we

[SAtalk] Update ruleset automatically

2003-05-30 Thread Pinku Surana
Is there a way to update the ruleset with the latest on the spamassassin servers? Something like spamassassin --update hostname would be nice. I'm not on the list, so please cc: me directly. Thanks, Pinku --- This SF.net email is sponsored

Re: [SAtalk] Update ruleset automatically

2003-05-30 Thread Theo Van Dinter
On Thu, May 29, 2003 at 09:35:35AM -0500, Pinku Surana wrote: Is there a way to update the ruleset with the latest on the spamassassin servers? Something like spamassassin --update hostname would be nice. nope. the only way to upgrade the rules is to upgrade the whole package. -- Randomly

RE: [SAtalk] User_prefs without local users?

2003-05-30 Thread Shayne Lebrun
Next, however you're calling spamc, you need to pass the user's username/domain. Using qmail-scanner requires a patch; search the archives and you'll find it, me thinks. -Original Message- From: Upwood, James [mailto:[EMAIL PROTECTED] Sent: Thursday, May 29, 2003 10:50 AM To: Shayne

RE: [SAtalk] User_prefs without local users?

2003-05-30 Thread Upwood, James
Great, that worked... Only problem is, it is only seeing the user root in the DB. This makes me assume that I still have to have a local user accounts? For example, I put my work account in the table under the username field as [EMAIL PROTECTED] and tried to whitelist [EMAIL PROTECTED] and it

Re: [SAtalk] Getting spamd to start on boot.

2003-05-30 Thread Patrick Morris
I believe you need to tell it what runlevels to start at. I don't have Red Hat, but a man chkconfig should help. John Lang wrote: chkconfig --add spamd to get it to start at boot. However, it isn't. I am able to start spamd from the command prompt.

RE: [SAtalk] User_prefs without local users?

2003-05-30 Thread Upwood, James
I did more research, it appears I need to call spamc as [EMAIL PROTECTED], problem is that I am using sendmail with spamass-milt and it calls spamd. IS there any way to call the milter or spamc using a variable or something that would be derived from the To: in the header? -Jim -Original

Re: [SAtalk] Getting spamd to start on boot.

2003-05-30 Thread C. Bensend
On Thu, May 29, 2003 at 08:22:10AM -0700, John Lang wrote: chkconfig --add spamd to get it to start at boot. However, it isn't. I am able to start spamd from the command prompt. Hi John, What does 'chkconfig --list spamd' display? You should see a 3:on in there, hopefully. If

[SAtalk] looking for feedback on Wanadoo

2003-05-30 Thread Andy Reinhardt
Greetings! I am a U.S. magazine business magazine reporter based in Paris, and I'm working on a story about Wanadoo. In the course of my research, I've become aware of the fact that Wanadoo was in a lot of hot water about 18 months ago because the wanadoo.fr domain was being used as the origin

Re: [SAtalk] sharing Bayes DB between relays

2003-05-30 Thread Joe Breu
Just a thought, why not run SA on the delivery host instead of the MX hosts? (I'm assume that both of your MX servers must forward the mail to a central server.) Your suggestion is the exact opposite of the intended function. The idea is to run two relays to share the load, or run as

Re: [SAtalk] Best way to process the log?

2003-05-30 Thread Alex van den Bogaerdt
On Thu, May 29, 2003 at 02:32:05PM +0200, Tony Earnshaw wrote: 3rd and 4th are *always* consecutive, whether you like it or not. They are not always. It often happens that mailer logs some message that comes between these 3rd and 4th lines of spamd. Possibly. I don't know what you

Re: [SAtalk] sharing Bayes DB between relays

2003-05-30 Thread Adam Denenberg
Since modifying the code to handle storing Bayes in MySql seems like a more long term project, is there any immediate way to support sharing the Bayes DB over NFS with proper file locking ? adam On Thu, 2003-05-29 at 12:12, Joe Breu wrote: Just a thought, why not run SA on the delivery host

Re: [SAtalk] Getting spamd to start on boot.

2003-05-30 Thread Kai Schaetzl
John Lang wrote on Thu, 29 May 2003 08:22:10 -0700: chkconfig --add spamd on Suse it's chkconfig spamd on, try that. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de http://msie.winware.org

Re: [SAtalk] Getting spamd to start on boot.

2003-05-30 Thread Derek C.
man chkconfig HINT: look for the --level option. -Derek At 08:22 AM 5/29/2003, John Lang wrote: Good morning. I'm probably going to get flamed for asking this... I'm running SA on RH7.3 w/sendmail. SA was installed from the bianaries. I have copied the provided startup script to

Re: [SAtalk] looking for feedback on Wanadoo

2003-05-30 Thread Hannu Liljemark
In the course of my research, I've become aware of the fact that Wanadoo was in a lot of hot water about 18 months ago because the wanadoo.fr domain was being used as the origin of a lot of hack attacks and spam. The company seemed unresponsive at the time to requests to clean up its act, and

Re: [SAtalk] Advice Please

2003-05-30 Thread Alan Leghart
--On Thursday, May 29, 2003 3:18 PM +0100 Ron McKeating [EMAIL PROTECTED] wrote: Why would an ordinary innocent email user be base 64 encoding their ordinary text. And why does it get such a big score. Here is the points awarded HTML_50_60 (2.1 points) BODY: Message is 50% to 60% HTML

[SAtalk] USAGE - Mutt Bindings

2003-05-30 Thread Max Baker
First off, this thing KICKS ASS! Second off, Here are a couple more mutt bindings that might be useful to stick in USAGE for others to enjoy. (Near the X binding to report spam) # Learn or unlearn a message as SPAM! macro index z | sa-learn --single -D --spam macro index Z | sa-learn --single -D

Re: [SAtalk] looking for feedback on Wanadoo

2003-05-30 Thread Rick Macdougall
Hi, I can't speak for anyone else on the list but... We problably have most of, if not all, wannado dialup and DSL ip's in our personal RBL. We do not block their actual email servers, but I do have a personal blacklist for anything coming from them that dumps them into /dev/null. Being

Re: [SAtalk] looking for feedback on Wanadoo

2003-05-30 Thread Joe Julian
On Thu, 29 May 2003, Hannu Liljemark wrote: In the course of my research, I've become aware of the fact that Wanadoo was in a lot of hot water about 18 months ago because the wanadoo.fr domain was being used as the origin of a lot of hack attacks and spam. The company seemed

Re: [SAtalk] looking for feedback on Wanadoo

2003-05-30 Thread Matt Kettler
At 06:13 PM 5/29/2003 +0200, Andy Reinhardt wrote: Greetings! I am a U.S. magazine business magazine reporter based in Paris, and I'm working on a story about Wanadoo. In the course of my research, I've become aware of the fact that Wanadoo was in a lot of hot water about 18 months ago because

Re: [SAtalk] Advice Please

2003-05-30 Thread Justin Mason
Ron McKeating said: Why would an ordinary innocent email user be base 64 encoding their ordinary text. And why does it get such a big score. Here is the points awarded HTML_50_60 (2.1 points) BODY: Message is 50% to 60% HTML HTML_MESSAGE (1.1 points) BODY: HTML included in

Re: [SAtalk] looking for feedback on Wanadoo

2003-05-30 Thread listuser
On Thu, 29 May 2003, Andy Reinhardt wrote: Greetings! Howdy. snip You'd be better off asking in a more general discussion forum like the new.admin.net-abuse.email newsgroup. You could even ask the spam-l mailing list for specifics about the spam side of things. Asking the mailing list of

Re: [SAtalk] Maillog analysis

2003-05-30 Thread Justin Mason
Mark said: A few weeks ago I thought of an interesting new statistical way of fighting spam. Having collected a few weeks worth of maillog data (about 500 MB), I wrote a small Perl script, matching IP addresses by the following simple rule (in words): Look at SMTP connections, and

Re: [SAtalk] Getting spamd to start on boot.

2003-05-30 Thread Jonathan Vanasco
almost there.. .you missed 1 line #chkconfig --add spamd; #chkconfig --levels 2345 spamd on On Thursday, May 29, 2003, at 11:22 AM, John Lang wrote: Good morning. I'm probably going to get flamed for asking this... I'm running SA on RH7.3 w/sendmail. SA was installed from the bianaries. I

Re: [SAtalk] controlling expiry for site-wide bayes dbs

2003-05-30 Thread Justin Mason
Mark Martinec said: Perhaps it would be simpler for us SA admins to have a separate setting to just turn off opportunistic auto-expiry, than having to tinker with two config files. The 'sa-learn --force-expire' could still benefit from the max_db_size setting in the standard config file.

Re: [SAtalk] Advice Please

2003-05-30 Thread Vivek Khera
AL == Alan Leghart [EMAIL PROTECTED] writes: AL to use different encoding (although, IIRC, it's not base-64 by AL default). I tested on one machine on our LAN, and from inside AL Excel 2000, select File and Send as email. Voici, base-64 encoded AL when it goes out. I'm glad I didn't follow

[SAtalk] Sa-learn question

2003-05-30 Thread Marek Dohojda
Hello I am new to the list, and I am very sorry if this question has been answered. I am running spammassasing along with qmail-scanner and qmail (well DOH). I created an e-mail account where junk e-mails are send to, and then have cron run sa-learn on the maildir of that e-mail address to

Re: [SAtalk] Best way to process the log?

2003-05-30 Thread Mark
- Original Message - From: Tony Earnshaw [EMAIL PROTECTED] To: SpamAssassin Talk [EMAIL PROTECTED] Sent: Thursday, May 29, 2003 3:33 PM Subject: RE: [SAtalk] Best way to process the log? 3rd and 4th are *always* consecutive, whether you like it or not. They are not always. It

Re: [SAtalk] Advice Please

2003-05-30 Thread AltGrendel
On Thu, 2003-05-29 at 13:26, Alan Leghart wrote: --On Thursday, May 29, 2003 3:18 PM +0100 Ron McKeating [EMAIL PROTECTED] wrote: Why would an ordinary innocent email user be base 64 encoding their ordinary text. And why does it get such a big score. Here is the points awarded

Re: [SAtalk] qmail+vpopmail suggestion

2003-05-30 Thread AltGrendel
On Thu, 2003-05-29 at 00:35, [EMAIL PROTECTED] wrote: Since you use qmail-scanner, what do you set your QMAILQUEUE environment variable to? How does it know to use spamc? Do you set it to the patch of spamc? If so, how do you get spamc+qmail-scanner-queue.pl working together? My tcp.smtp

[SAtalk] Spamd running after spamc exit

2003-05-30 Thread Thomas Schulz
We have had a couple of instances recently where our mail server became severely overloaded, with many spamd processes running. One was on the 21st when dorkslayers.com went down. The other was yesterday for no apparent reason. In each case, we had around 150 spamd processes running, with 2.5

[SAtalk] Whitelist

2003-05-30 Thread Jack Gostl
I don't suppose someone out there could tell me how to tell procmail to simply accept the message and stop processing? Generally, just deliver it to $DEFAULT. Something like this (towards the beginning of your procmailrc): FROM=`formail -rx To: | sed -e 's/^[ ]*//'`

[SAtalk] Attaboy

2003-05-30 Thread Jack Gostl
Someone posted a message here saying that SA really kicks ass. I know it is an international community on this list, so let's make sure we all understand it was a compliment. It was also an understatement. Amidst all the questions in here, I wouldn't want the developers to lose sight of how well

Re: [SAtalk] Spam nstallingassasin

2003-05-30 Thread Joseph Noonan
Never mind. Brain not engaged before keyboard activated. Apologies all around. -- Joseph F. Noonan Rigaku/MSC Inc. [EMAIL PROTECTED] On Wed, 28 May 2003 at 3:55pm Rick Macdougall wrote: Hi, It has? That's news to my dns... @40003ed514501c91686c rblsmtpd: 200.171.247.234 pid

[SAtalk] using sa-learn with spamc

2003-05-30 Thread Dale Harris
So I have spamassassin 2.55 installed. However, it doesn't look like spamc is passing any information on to sa-learn. I do temporary store the spam in it's own folder... so it is it valid to pipe messages to: spamassassin -d | sa-learn --spam --single Is what I want to do to populate my

Re: [SAtalk] Attaboy

2003-05-30 Thread Jonathan Nichols
I now have users complaining that they receive as much as 5 spams out of 500. This is absurdity worthy of the Marx brothers. Nice job. Keep at it guys. Amen to that! 5 spams? Heh, show them how much they WOULD get if it wasn't for SpamAssassin. :) spam-stats from one of the co-lo machines:

Re: [SAtalk] qmail+vpopmail suggestion

2003-05-30 Thread AltGrendel
On Thu, 2003-05-29 at 14:47, AltGrendel wrote: Another note: If you have problems and you know that SA is running properly (all tests work), then you need to start digging at their web site. The archives are good and the FAQ at the site should answer most basic questions. By their I mean the

Re: [SAtalk] using sa-learn with spamc

2003-05-30 Thread Theo Van Dinter
On Thu, May 29, 2003 at 12:34:50PM -0700, Dale Harris wrote: So I have spamassassin 2.55 installed. However, it doesn't look like spamc is passing any information on to sa-learn. I do temporary store spamc doesn't do learning. spamd can autolearn, but that's it. spamassassin -d | sa-learn

Re: [SAtalk] controlling expiry for site-wide bayes dbs

2003-05-30 Thread Theo Van Dinter
On Thu, May 29, 2003 at 02:36:24PM -0500, Stewart, John wrote: I think you'll know my next question... when is it due? =) Hopefully, in around a month. (more specifically, sometime around the beginning of July is the plan.) -- Randomly Generated Tagline: Don't Hit A Man When He's Down. Kick

RE: [SAtalk] Sa-learn question

2003-05-30 Thread Tom Meunier
spamassassin -D --lint, read up at the top where it tells you how many messages are in the Bayes database. Then run sa-learn. Then do it again. You'll see it incremented accordingly. -Original Message- From: Marek Dohojda [mailto:[EMAIL PROTECTED] Sent: Thursday, May 29, 2003 1:12 PM

Re: [SAtalk] Cannot open bayes_path?

2003-05-30 Thread Mike Batchelor
I've been having this problem too. The locking code is in UnixLocker.pm and is pretty straightforward. One thing I notice is that the timeout for a stale lock is 10 minutes. If a SpamAssassin instance tries and fails to get a lock for 10 minutes, it will decide the lock is stale and remove

RE: [SAtalk] Attaboy

2003-05-30 Thread Stewart, John
Aye, ATTABOY! Definitely a kick ass piece of software. spam-stats from one of the co-lo machines: spam: 304 clean: 80 skipped: 0 total: 384 processed: 384 The mail log was rotated earlier this morning. And yes, the stats are accurate.. only 80 legit mails, everything else SPAM. If

[SAtalk] Solved: spamstats graph

2003-05-30 Thread Jonathan Nichols
Greetings, Silly me and my lack of MRTG-fu. Swapping the perminute option for perhour worked. The box just doesn't get enough mail to make the perminute option work. http://www.pbp.net/mrtg/spam_jezebel.html ---the spam-stats graph, stats collected from a machine colocated here. Nearly 80%

Re: [SAtalk] Spamd running after spamc exit

2003-05-30 Thread Thomas Schulz
From: Christopher Meiklejohn [EMAIL PROTECTED] To: Thomas Schulz [EMAIL PROTECTED] Subject: Re: [SAtalk] Spamd running after spamc exit Date: Thu, 29 May 2003 15:24:56 -0400 X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp) Are you using quotas on the system, I have

Re: [SAtalk] Attaboy

2003-05-30 Thread Mark Thornton
I have long thought I should have a monthly failure of the spam filters so that clients will remember what is really happening. One downside to effective filtering is the clients think the spam problem has gone away. Mark Thornton San Marcos Internet, Inc 512-393-5300 - Original Message

Re: [SAtalk] Attaboy

2003-05-30 Thread Mike Batchelor
--On Thursday, May 29, 2003 12:50 PM -0700 Jonathan Nichols [EMAIL PROTECTED] wrote: spam-stats from one of the co-lo machines: spam: 304 clean: 80 skipped: 0 total: 384 processed: 384 OK, time for show and tell, I guess. This is yesterday on one of my two SA+MD relays: spam: 34,587 clean:

Re: [SAtalk] Worried about RBLs

2003-05-30 Thread Stuart Gall
Another question... If running spamd to scan the mail ( using qmail-scanner as the go between ), where is the config file that the spamd process uses? I can't for the life of me get anything to take that I put in the config files... I tried putting it in /etc/mail/spamassassin/local.cf, I

RE: [SAtalk] Attaboy

2003-05-30 Thread Marek Dohojda
Here here as well -Original Message- From: Thomas Cameron [mailto:[EMAIL PROTECTED] Sent: Thursday, May 29, 2003 1:16 PM To: SpamAssassin listserve And a big Amen! from the choir! TC - Original Message - From: Jack Gostl [EMAIL PROTECTED] To: SpamAssassin listserve [EMAIL

Re: [SAtalk] Attaboy

2003-05-30 Thread Jeremy Oddo
Jack Gostl said: Someone posted a message here saying that SA really kicks ass. Hee Hee. I know I posted that very saying about SA, but I did so on the vpopmail maillist. I know it is an international community on this list, so let's make sure we all understand it was a compliment. It was

RE: [SAtalk] sa-learn on messages from outlook/exchange

2003-05-30 Thread Mike Batchelor
I'm not so sure about that. I have only a few hundred hams learned (almost all by hand), and thousands of spams learned (almost all automatically) and everyone here thinks SA has almost supernatural abilities to ferret out the spam and ham. And it's just getting better, the more ham I give it

[SAtalk] report_header

2003-05-30 Thread Jonathan Nichols
Most of this is confusion, and a stubborn friend of mine that claims he saw otherwise. Has report_header been removed? I'm not seeing it in some docs, but I thought I saw it in others.. Now, what's taken its place again? report_safe? ---

Re: [SAtalk] Cannot open bayes_path R/W: File exists

2003-05-30 Thread Kelson Vibber
Mike Batchelor [EMAIL PROTECTED] wrote: *FLAME ON* Yeah, I kinda noticed. Look in the recent MIMEDefang archives for the thread problems with bayes (?) database access for one possibility. Your search terms got me this: No matches were found for '(problems or problem) and with and bayes

Re: [SAtalk] Attaboy

2003-05-30 Thread Steve Prior
Jeremy Oddo wrote: I agree fully. I have a very light-traffic server (10 users across 3 domains). One of our employees would receive 120+ SPAM messages a day. I decided to put SA in place mainly for him (although I put every user on it). He's still getting a lot of SPAM...it's just not making

Re: [SAtalk] Advice Please

2003-05-30 Thread Stuart Gall
- Original Message - From: Ron McKeating [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, May 29, 2003 5:18 PM Subject: [SAtalk] Advice Please Why would an ordinary innocent email user be base 64 encoding their ordinary text. And why does it get such a big score. Here is the

RE: [SAtalk] Getting spamd to start on boot.

2003-05-30 Thread John Lang
When I run chkconfig --list, spamd does not show up. When I run chkconfig --list spamd, I get the following: service spamd supports chkconfig, but is not registered (run 'chkconfig --add spamd') If I enter chkconfig --add spamd It just does it. Then after that, if I enter chkconfig --levels 2345

Re: [SAtalk] Cannot open bayes_path? - SOLVED (i think)

2003-05-30 Thread Mike Batchelor
I had an immediate and dramatic result for my experiment. The number of these File exists errors getting logged decreased drastically, and the number of bayes.lock.* files in my bayes_path went to nothing, or one or two at most. I'm also seeing the bayes_journal getting updated frequently, so

Re: [SAtalk] report_header

2003-05-30 Thread Theo Van Dinter
On Thu, May 29, 2003 at 02:52:06PM -0700, Jonathan Nichols wrote: Has report_header been removed? In 2.50, yes. Now, what's taken its place again? report_safe? yes. -- Randomly Generated Tagline: 113 grams, 10 milliliters ... He's lead, Jim. pgp0.pgp Description: PGP signature

Re: [SAtalk] Attaboy

2003-05-30 Thread Mike Smith
OK, time for show and tell, I guess. This is yesterday on one of my two SA+MD relays: spam: 34,587 clean: 16,882 bounced: 426 discarded: 719 skipped: 6310 processed: 58,924 (I forgot to count access_db bounces, oh well... this shows what SA+MD alone processed) I have a 2nd one in

[SAtalk] getting digest indexes but no body text with the actual messages...

2003-05-30 Thread Craig Ian Dewick
Is anyone else seeing this? Since I installed SA 2.55 recently and subscribed to this list, I'm getting the digest indexes delivered properly, but the emails are not including any of the actual messages sent to the list. I use PINE for all my email, in case that helps. Regards, Craig. --

[SAtalk] OCR Software.

2003-05-30 Thread Brian Godette
http://www.claraocr.org/ http://freshmeat.net/ --- This SF.net email is sponsored by: eBay Get office equipment for less on eBay! http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5 ___

RE: [SAtalk] Attaboy

2003-05-30 Thread Matt Kettler
Wow, I don't think I've seen an AOL! thread on SATalk before :) But hey while were at it.. Me Too! :) ( For an explanation of AOL! see http://www.catb.org/~esr/jargon/html/A/AOL.html ) --- This SF.net email is sponsored by: eBay Get office

Re: [SAtalk] report_header

2003-05-30 Thread Matt Kettler
At 02:52 PM 5/29/2003 -0700, Jonathan Nichols wrote: Most of this is confusion, and a stubborn friend of mine that claims he saw otherwise. Has report_header been removed? I'm not seeing it in some docs, but I thought I saw it in others.. Now, what's taken its place again? report_safe? Well a

RE: [SAtalk] Attaboy

2003-05-30 Thread Gary Funck
First, let me second those att-a-boys. Spamassassin is a demonstration of what a full spectrum, high technology implementation can do. It solves an important problem, and solves it well. Congrats to the SA team (and to the supporting cast of Razor, Pyzor, DCC and the RBL's). OK, time for show

[SAtalk] Reporting spam via Theo Van Dinter's Handlespam Problem.

2003-05-30 Thread Jim Ford
Hi, Instead of simply dumping spam, I'm now trying to be a bit more proactive and report it to 'Vipul's Razor et al', using my folder of spam missed by spamassasin and Theo Van Dinter's Handlespam. I don't use real domains addresses on my home machines and whilst I've changed the Handlespam

Re: [SAtalk] 2.53 vs 2.55

2003-05-30 Thread Simon Byrnand
At 13:53 29/05/03 +0100, Richard Hopkins wrote: --On Thursday, May 29, 2003 11:33 AM +1200 Simon Byrnand [EMAIL PROTECTED] wrote: At 10:40 28/05/03 -0400, Jack Gostl wrote: I just upgraded from 2.53 to 2.55. Was there some discussion awhile back about 2.55 having a problem with RBL? No, It's

[SAtalk] Best way to whitelist mailing list msgs?

2003-05-30 Thread Robert Sinton
Probably a dumb question, but... Could somebody please advise the best method of whitelisting messages from a given mailing list? Users here are occasionally getting incoming mailing list messages flagged because of their contents. I'd like to be able to atomatically whitelist those messages

[SAtalk] site wide BAYES

2003-05-30 Thread guenther
hey folks, Would it be wise (actually, would it do any harm) to have one BAYES database for a whole site, instead of per-user basis? (Just a hand full of users.) How can I do that? Did not find any note, how to define a site wide BAYES database. TIA ...guenther -- char *t=[EMAIL PROTECTED];

Re: [SAtalk] Best way to whitelist mailing list msgs?

2003-05-30 Thread Mark Martinec
| Could somebody please advise the best method of whitelisting messages | from a given mailing list? | | 'whitelist_from' doesn't work because (a) the messages come 'From:' | individual posters, and (2) the 'Sender:' address (which does reflect | the mailing list) isn't in the set of headers

Re: [SAtalk] Best way to whitelist mailing list msgs?

2003-05-30 Thread Matt Kettler
At 11:25 AM 5/30/2003 +1200, Robert Sinton wrote: 'whitelist_to', when given the mailing list address, only contributed -6. I guess I could use all_spam_to, but it starts to look a bit odd given that the mailing list address doesn't actually represent a local user. I could of course just write

Re: [SAtalk] Attaboy

2003-05-30 Thread Steve Wilson
Jack Gostl wrote: Someone posted a message here saying that SA really kicks ass. I know it is an international community on this list, so let's make sure we all understand it was a compliment. It was also an understatement. Amidst all the questions in here, I wouldn't want the developers to lose

Re: [SAtalk] Need help rule writing.

2003-05-30 Thread Christopher Eykamp
How about this? BODY dottywords /[a-z]\.[a-z].+[a-z]\.[a-z].+[a-z]\.[a-z].+[a-z]\.[a-z]/is Probably not too efficient, and completely untested, but it should match messages with 4 or more d.ott.y w.or.ds At 10:56 AM 5/24/2003 -0700, lindsay adams wrote: I just got a piece of pr0n spam that had

Re: [SAtalk] SpamAssassin on CNN!

2003-05-30 Thread Thomas Wheeler
I wonder if the'll mind is I use procmail to auto forward all spam above say score of 15 or 20 to them ?.. - Original Message - From: Alan Leghart [EMAIL PROTECTED] To: Jeremy Oddo [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Tuesday, May 27, 2003 6:44 PM Subject: Re: [SAtalk] SpamAssassin

RE: [SAtalk] Best way to whitelist mailing list msgs?

2003-05-30 Thread Gary Funck
-Original Message- From: Robert Sinton Sent: Thursday, May 29, 2003 4:26 PM Could somebody please advise the best method of whitelisting messages from a given mailing list? Users here are occasionally getting incoming mailing list messages flagged because of their contents.

Re: [SAtalk] Maillog analysis

2003-05-30 Thread Michael Sims
Quoting Mark [EMAIL PROTECTED]: Look at SMTP connections, and consider all IP addresses spam that, in one session, deliver to 4 or more local recipients simultaneously. This gave me a good idea for a test I could run in MIMEDefang. I have a small wrapper in my mimedefang-filter around the

Re: [SAtalk] Best way to whitelist mailing list msgs?

2003-05-30 Thread Matt Kettler
At 02:13 AM 5/30/2003 +0200, Mark Martinec wrote: A useful solution to white or blacklist a mailing lists is to check the envelope address, and not to try to guess the sender address from mail header. I'm not saying that the present mechanisms should be replaced or removed, it does have its place,

Re: [SAtalk] site wide BAYES

2003-05-30 Thread Matt Kettler
At 01:45 AM 5/30/2003 +0200, guenther wrote: hey folks, Would it be wise (actually, would it do any harm) to have one BAYES database for a whole site, instead of per-user basis? (Just a hand full of users.) There are some advantages and some drawbacks here. On the advantage side as it learns

Re: [SAtalk] Attaboy

2003-05-30 Thread Jack Gostl
I now have users complaining that they receive as much as 5 spams out of 500. This is absurdity worthy of the Marx brothers. Nice job. Keep at it guys. Amen to that! 5 spams? Heh, show them how much they WOULD get if it wasn't for SpamAssassin. :) spam-stats from one of the

[SAtalk] PerMsgStatus

2003-05-30 Thread Dan
I just installed SA last night, and everything appeared to have installed fine and I go to run the test and I keep getting this. I've looked through the archives to see if this has been answered but I can't seem to find anything. Much Appreciated! little:/installs/Mail-SpamAssassin-2.55#

  1   2   >