Alright, I am perfectly happy to be larted at this point as long
as I get an answer in the process. I have put an add_header in
my /etc/mail/spamassassin/local.cf just like this one:
add_header all Admin [EMAIL PROTECTED]
but no header is added to the processed mail. I know that my
Hello all,
We are running SpamAssassin 2.5 (with amavisd, postfix and razor) on Linux machine.
But I read that new version of SpamAssassin 2.60 is available now. It took long time
to build this anti-spam box and I had a really hard time, but now I should update the
SpamAssassin version.
Hello
Recently I had to upgrade perl to 5.8 to accommodate another
application. Before this spamassassin 2.43 was being used with spamd and
vpopmail and always functioned perfectly. After the perl upgrade,
spamassassin stopped writting spam headers for mail that had a 5.0 or over
rating.
The problem is allowing end users to manage their whitelists without intevention
and without using vi :) One solution was to export home directories via Samba,
this was shot down due to problems with cr/lf, typographical errors that casue
spamassassin to choke, etc.
Some steps in the right
Hi list
I have installed spamassassin-2.60, mimedefang-2.38 and sendmail-8.12.10 on
a BSDi system (BSDOS4.3) with perl-5.6.1
And I discovered that spamassassin makes the following error: Out of memory!
And I don´t know what to do. It is not matter of hw resources, because it is
big enough.
I will
Hi Arlo,
-Original Message-
From: Arlo Gilbert [mailto:[EMAIL PROTECTED]
Sent: Monday, October 20, 2003 4:58 PM
To: [EMAIL PROTECTED]
Subject: [SAtalk] dcc returns letters not numbers. docs say
to limit #'s
I'm hopeful that somebody can explain the dcc results to me.
i
Hello all,
We are running SpamAssassin 2.5 (with amavisd, postfix and razor) on Linux machine. But I read that new version of SpamAssassin 2.60 is available now. It took long time to build this anti-spam box and I had a really hard time, but now I should update the SpamAssassin version.
Can
You should call me. I'm starting a company that will eliminate spam for good. Not just
filter it. Filtration won't scale. We'll be eliminating spam for good.
CP
--
Chris Paul
Rex Consulting - Messaging and Security Solutions - www.rexconsulting.net
+1 831.338.7712
Key fingerprint = 588A 289C
Recently had some false negatives come through. Most of them are one sentence
saying hello, and a URL. I noticed some strange headers, listed here:
X-E:
X-I:
X-ENVID
X-Email
So I wrote a quickie rule and it catches about 126 spam per week.
header BAD_HEADERS ALL =~
Patrick Morris wrote:
Unless I'm misunderstanding what your procmail recipes are doing,
it's *alread* been hacked into Sendmail.
Not exactly, there are a few load-based controls on *some* aspects of
sendmail's processing...
From a sendmail.cf file I've got lying around:
# load average at
Let me guess: You're hiring hit men to track down and eliminate, not just
the Spam, but the Spammers themselves!
Then, you're going to invest in genetic research that will find the Spammer
gene and provide an inoculation for all the children in the world, to
eradicate any possibility that they
-Original Message-
From: Dan Wilder [mailto:[EMAIL PROTECTED]
Sent: Tuesday, October 21, 2003 12:41 PM
To: Spamassassin-Talk (E-mail)
Subject: Re: [SAtalk] [OT] What is next step?
On Tue, Oct 21, 2003 at 10:01:24AM -0400, Chris Santerre wrote:
[ Describes plan for DDOS
On [10/21/03 17:56], Chris Paul wrote:
You should call me. I'm starting a company that will eliminate spam for good.
Not just filter it. Filtration won't scale. We'll be eliminating spam for good.
The company is just being started, but already has some marketing pitches :)
Good luck :)
CP
My Bayes database finally got its 200 spams and hams and kicked in. I've
noticed, however, that it *always* says that the probability is 99%. Is
this normal?
Thanks!
Scott
---
This SF.net email is sponsored by OSDN developer relations
Here's
Nope these are bogus. I have seperate rules for them in the last Rule
Emporeum update. I used seperate, as they often are seen in pairs. Although
I didn't tag X-Email, because I'm not sure about that one.
--Chris Santerre
-Original Message-
From: Regis Wilson [mailto:[EMAIL PROTECTED]
Even on good mail? Or only on Spam? Because when I see spam, I'm 99%
sure it's spam, and a well-trained Bayes engine would be 99% sure also.
If it's on good mail that you're seeing 99%, every time, then your
database is screwed up and you should start over.
-Original Message-
From:
Hi Arlo,
-Original Message-
From: Arlo Gilbert [mailto:[EMAIL PROTECTED]
Sent: Wednesday, October 22, 2003 8:48 AM
To: Larry Gilson
Cc: [EMAIL PROTECTED]
Subject: Re: [SAtalk] dcc returns letters not numbers. docs
say to limit # 's
Thanks Larry,
I do understand that 9
I've recently found a great user interface, but don't know what it is using.
I needed to lower the spam rate for my grandfather. 110.net was purchased by
ici.net, who was then owned by conversant. *sigh*
Anywho mail.110.net has a login and then a VERY nice interface for not only
whitelisting, but
At 08:36 AM 10/22/2003, Scott Rothgaber wrote:
My Bayes database finally got its 200 spams and hams and kicked in. I've
noticed, however, that it *always* says that the probability is 99%. Is
this normal?
No.. It is however quite normal for nearly all spams to be at 99% and
nearly all nonspam
I can't thank Bob enough for pointing me to the other spam list regarding
blocks and legal info. Info can be found here:
http://www.claws-and-paws.com/spam-l/
Read the FAQ before posting!
Anywho, I'm reading the archives so I don't look foolish asking questions,
and I see this latest post:
You clearly don't understand that most spam complaints do not go to the
spammers. It's called a joe job and it's something I am suffering under
right now. We have received well over 5,000 spam complaints from mostly
automated ignorant systems in the last 2 weeks. I respond to each and every
At 05:15 PM 10/21/2003, =?koi8-r?Q?=22?=Oleg=?koi8-r?Q?=22=20?= wrote:
Can somebody advise me, please, the way in which I can update it?
Can I just do new install from CPAN? Or it will not be enough?
The system is working now and I do not want to screw it,
therefore I need help.
Oleg,
I know it's going to take a little effort to update Spamassassin. For me
it was fairly straightforward. I just unpacked it from the tarball and
did an install. Others had issues migrating existing databases, but most
of that is covered in the README and INSTALL files in the package.
I've been trying to upgrade my Spam Assassin install on RedHat 9
unsuccessfully so far.
I get this when trying to use the RPM from the SA site.
[EMAIL PROTECTED] src]# rpm -Uvh spamassassin*
warning: spamassassin-2.60-1.i386.rpm: V3 DSA signature: NOKEY, key ID
e580b363
error: Failed
Hello list's friends.
I have FreeBSD box with sendmail+spamassassin+procmail. As it comes more and
more spam messages I realize to prepare rules for spam deletion. I have done
3 months work on spam mesgs+senders+scores analysis. Now I'm ready to do it,
but I'm not very familiar with procmail. I
Going from 2.5x to 2.6x should be pretty painless and just work.. the
only problem cases I've seen are when people use spamd with -u root
(2.60's spamd bails out if you try to force it to always run as root).
If we're not using spamd, can a CPAN shell 'install' for SA upgrade without a
-Original Message-
From: Bill Larson [mailto:[EMAIL PROTECTED]
Sent: Wednesday, October 22, 2003 11:19 AM
To: Chris Santerre
Subject: Re: [SAtalk] [OT] What is next step?
You clearly don't understand that most spam complaints do not
go to the
spammers. It's called a joe job
Hi,
I've a newbie's request: after to have modified the local.cf, how could
I restart sa? There is a command, or have you got any script?
Normally the spam daemon starts with: /usr/bin/spamd -d -v -u vpopmail
-x
My system is: openbsd 3.3, sa 2.60
Thanks for all
Andrea
On Tue, 21 Oct 2003, Chris Paul wrote:
You should call me. I'm starting a company that will eliminate spam
for good. Not just filter it. Filtration won't scale. We'll be
eliminating spam for good.
1) I hope you have a robust server. The latest spammer tactic is to DOSA
anyone with a good
We're super lightweights, peak at 500 foreign inbounds/hour with overnight
lows at 15 per hour and we don't scan authenticated internal-to-internal
mailings. We stress tested our setup by suspending the processing queue,
loading 5000/50k (about 244mb) test messages (19.5 score each) sent to a
You should call me. I'm starting a company that will eliminate spam for
good. Not just filter it. Filtration won't scale. We'll be eliminating
spam for good.
CP
--
Chris Paul
Rex Consulting - Messaging and Security Solutions - www.rexconsulting.net
http://www.rexconsulting.net...
On Tue, Oct 21, 2003 at 08:09:33PM -0400, Kris Deugau wrote:
Patrick Morris wrote:
Unless I'm misunderstanding what your procmail recipes are doing,
it's *alread* been hacked into Sendmail.
The whole point was to keep accepting *new* mail, while making sure that
*concurrent* procmail-SA
On Tue, Oct 21, 2003 at 05:11:13PM -0300, Guillermo Delmastro wrote:
Hi list
I have installed spamassassin-2.60, mimedefang-2.38 and sendmail-8.12.10 on
a BSDi system (BSDOS4.3) with perl-5.6.1
And I discovered that spamassassin makes the following error: Out of memory!
And I don?t know what
Hi all,
Just did a clean install of 2.6 using Ports on freebsd 4.8p13. Using
spamd, and a config files from 2.42 with (i think!) deprecate options
removed.
[EMAIL PROTECTED] /usr/local/etc/mail/spamassassin 516$ sudo
spamassassin --lint
[EMAIL PROTECTED] /usr/local/etc/mail/spamassassin 517$
Bill Larson wrote:
You clearly don't understand that most spam complaints do not go to the
spammers. It's called a joe job and it's something I am suffering under
right now. We have received well over 5,000 spam complaints from mostly
automated ignorant systems in the last 2 weeks.
I don't
when I sa-learn on a folder of spam it takes almost no time and says
learned 1 no matter how many where in the file but when I do an
sa-learn of ham, it works fine. Ideas?
Anne Ramey
---
This SF.net email is sponsored by OSDN developer
At 10:18 AM 10/22/2003, Chris Santerre wrote:
It is tough to remember everything SA looks for. Does 2.60 have something
like this? Comments?
rawbody MY_TROJANED_HOST
/http:\/\/\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{2,4}\//
describe MY_TROJANED_HOST Possible Trojaned box used for spam hosting
score
Michael Emdy wrote:
I've been trying to upgrade my Spam Assassin install on RedHat 9
unsuccessfully so far.
I get this when trying to use the RPM from the SA site.
[EMAIL PROTECTED] src]# rpm -Uvh spamassassin*
warning: spamassassin-2.60-1.i386.rpm: V3 DSA signature: NOKEY, key ID
e580b363
Ian Douglas wrote:
Any permission issues to take into account if you make the owner of
the file something other than the user's login name? If you change
the owner of the filename but maintain writable permission to the
files otherwise, you effectively have no quota issue as someone else
will
Hi everyone,
I have SA 2.60 running on a Redhat 8 system with CommuniGate Pro. The
setup works very well except that auto-learning doesn't work. When I
send myself a ham that is below the threshold, I see the Bayesian
attempting to learn, only to fail on creating a temporary lockfile:
Oct
Of course, I do not write to the list, if I did not look anywhere I had some
idea to look.
Procmailrc.example was the first one I found on my drive.
Anywhere, it is only very basic to procmail rules.
Please, any other idea to start with ?
Peter Rosa
- Original Message -
From: Morris
Update of OBFU chr's rule.
rawbody __FVGT_rb_ATTACHMENT /Content-Disposition: attachment/i
body __FVGT_b_OBFU_J /j(b|c|f|g|w)/i
body __FVGT_b_OBFU_OTHER /(vj|vk|xj|xk|yy|zf|zj)/i
body __FVGT_b_OBFU_Q0 /(j|k|p|q|t|v|w|z)q/i
body __FVGT_b_OBFU_Q1 /q(a|f|h|j|k|m|n|s|y)/i
body __FVGT_b_OBFU_V
He could be one of these folks:
http://www.tbray.org/ongoing/When/200x/2003/10/12/SpamPlan27.
Or, he could actually have something that's won't inspire Spam Houses
to become approved Mail Relays. Or, maybe he's planning to boycott the
Hormel product?
In the same way that I'm drawn to
Anyone here running mailman lists via postfix and
uses spamassassin to score/filter messages sent to the lists? Preferably
everything tagged as spam should be trashed/rejected.
Off-list contacts are fine.
Thanks,
Christian
Hello list's friends.
I have FreeBSD box with sendmail+spamassassin+procmail. As it comes more and
more spam messages I realize to prepare rules for spam deletion. I have done
3 months work on spam mesgs+senders+scores analysis. Now I'm ready to do it,
but I'm not very familiar with procmail. I
Hi Michael,
There is definitely a dependency order. You need to upate installed RPM.
If you want to update each RPM, one at a time, you will need to use the
--nodeps option. Just understand that if you update each RPM one at a time,
you *have* to update them all. Otherwise you will have one
--On Wednesday, October 22, 2003 10:35:28 -0400 Anne Ramey
[EMAIL PROTECTED] wrote:
when I sa-learn on a folder of spam it takes almost no time and says
learned 1 no matter how many where in the file but when I do an
sa-learn of ham, it works fine. Ideas?
what format(s) are the 2 mailboxes?
If you allow shell access, you therefore effectively allow any user to
meddle with any other user's SA prefs, AWL, and Bayes files if you do
per-user Bayes as well. :/
Not an issue with chroot'd shell access though ;o)
-id
---
This
On October 22, 2003 10:35 am, Anne Ramey wrote:
when I sa-learn on a folder of spam it takes almost no time and says
learned 1 no matter how many where in the file but when I do an
sa-learn of ham, it works fine. Ideas?
If the folder is of mbox format, you may want to specify the --mbox
I'm not sure if this would be something that SpamAssassin could do, or if it
would need to be integrated into amavisd-new, for those of us using that
excellent tool.
(BTW, I just wanted to say 2.60 is the bee's knees. Bayes learning seems to
be even more improved than the already good 2.55
At Wed Oct 22 16:21:27 2003, Bill Larson wrote:
Most of the spam in question is originating in China. You may wish to send
complaints to the following addresses
role: APNIC Hostmaster
e-mail: [EMAIL PROTECTED]
notify: [EMAIL PROTECTED]
I don't think sending mail to
Fred I-IS COM [EMAIL PROTECTED] writes:
Update of OBFU chr's rule.
rawbody __FVGT_rb_ATTACHMENT /Content-Disposition: attachment/i
body __FVGT_b_OBFU_J /j(b|c|f|g|w)/i
You really really need to use character classes.
/j[bcfgw]/i
Is this rule syntax legal? I didn't know I could
At 10:35 AM 10/22/2003, Anne Ramey wrote:
when I sa-learn on a folder of spam it takes almost no time and says
learned 1 no matter how many where in the file but when I do an sa-learn
of ham, it works fine. Ideas?
What command line did you use? and what format is the mail in?
If you're giving
Hello
I see allot of such errors in my syslog. I think they apear only if i enable
RAZOR, with Razor disabled i never saw such an error, any idea ? Can i
change the timeout somewhere ?
Oct 22 19:54:11 tschuggen amavis[3870]: (03870-02) SA TIMED OUT, backtrace:
at
On Tue, 21 Oct 2003, Ian Douglas wrote:
NOW I see auto-whitelist and 'bayes' files that are exceeding 1MB in size,
each. Is this 'normal'?
Any permission issues to take into account if you make the owner of the file
something other than the user's login name?
Minor issues. I am more
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Stewart, John writes:
I'm not sure if this would be something that SpamAssassin could do, or if it
would need to be integrated into amavisd-new, for those of us using that
excellent tool.
(BTW, I just wanted to say 2.60 is the bee's knees.
Rumor has it that Stewart, John may have mentioned these words:
[snippety]
One thing that might be very useful is for every email coming through that
is scanned, to log not only the spam level (which is already done with
amavisd-new, and I would assume for those using spamd) but the previous hop
Altho not thru SA, I created a set of programs that scan my qmail queue for
doublebounces whatnot, scan the headers of normal messages and/or
doublebounces log the IP addresses into a postgresql database.
sendmail has an operative for double bounces to redirect those messages to
another
John Stewart (not the talk show host, nor the singer) wrote:
I'm sure SA must parse each of the Received headers to
determine the SMTP
servers, so at some point this information is available. Would it be
possible to get this information logged somehow with the spam level?
[EMAIL
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Stewart, John writes:
I'm guessing the -get_report function (object? Not sure the terminology
with this OO stuff) is simply the text that normally appears at the bottom
of an email when you do spamassassin -t. Alas, this would not contain the
At 09:37 PM 10/22/03 +0200, Andreas Fuchs wrote:
I see allot of such errors in my syslog. I think they apear only if i enable
RAZOR, with Razor disabled i never saw such an error, any idea ? Can i
change the timeout somewhere ?
What kind of setup are you using? It's hard to give a whole lot of
Todd Joseph [EMAIL PROTECTED] wrote:
He could be one of these folks:
http://www.tbray.org/ongoing/When/200x/2003/10/12/SpamPlan27.
More likely one of these:
http://www.rhyolite.com/anti-spam/you-might-be.html
--
Keith C. Ivey [EMAIL PROTECTED]
Washington, DC
I am trying to install SpamAssassin 2.6, and I keep getting the message:
$ ./spamassassin
HTML::Parser version 3.24 required--this is only version 3.05 at
/home/gthorne/perlmods/lib/site_perl/5.6.0/Mail/SpamAssassin/HTML.pm
line 8.
Even though I installed the newest HTML::Parser locally (under
Chris Santerre [EMAIL PROTECTED] wrote:
http://203.232.101.125:3344
This smells of a trojaned box for spamming. I'm thinking of
writing a rule that looks for http links with IP addresses and a
port number. I'm thinking the FP rate would be low.
It is tough to remember everything SA
Tom Meunier wrote:
Even on good mail?
Duh! Sorry for that half-baed description. Spams are marked 99%. It is
not falsely classifying good messages. Actually, I saw two 90% scores today.
---
This SF.net email is sponsored by OSDN developer
65 matches
Mail list logo
