Re[2]: [SAtalk] What is marked as spam

2003-11-23 Thread Robert Menschel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello John, Saturday, November 22, 2003, 7:56:07 PM, you wrote: RM 1) The Swen virus is not spam. It should be caught by anti-virus RM software, not by anti-spam software. JO It's email that I don't want. It has a predictable From: and/or JO

Re: [SAtalk] What is marked as spam

2003-11-23 Thread Bob Apthorpe
Hi, On Sat, 22 Nov 2003 19:56:07 -0800 John Oliver [EMAIL PROTECTED] wrote: On Sat, Nov 22, 2003 at 06:24:38PM -0800, Robert Menschel wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello John, Saturday, November 22, 2003, 4:24:01 PM, you wrote: JO I started using the

[SAtalk] Re: What is marked as spam

2003-11-23 Thread Bryan Hoover
Taking a break from reading Orwell's 1984... Also be aware that SA uses 1 of 4 different score sets depending on which of auto_learn, and network checks are on. From some documentation somewhere: #If four valid scores are listed, then the score that is used depends on how #SpamAssassin is being

[SAtalk] Subject line not being marked

2003-11-23 Thread John Horne
Hello, I've just installed spamassassin 2.60 onto my local Pc in order to test it out prior to upgrading some older systems. However, I am seeing messages being 'marked' as spam, but the subject line is not changing. Example: == Date: Fri,

Re: [SAtalk] Bug in SA? Anyone else get messages like this?

2003-11-23 Thread David A . Roth
Thanks to everyone who replied to this thread. I have since added the example from procmailrc.example, but I am still getting these messages. I have gotten two today. From Fri Nov 21 14:21:46 2003 X-UIDL: %[E!!nj'!!h1:!cdc! From Fri Nov 21 15:14:53 2003 X-UIDL: @Q'!!fZ3!!-8T!DGb!! If this is

[SAtalk] Meaning of spamassassin -a option

2003-11-23 Thread John Parken
Through the news.spamassassin.org site I found what looks like a good way for Outlook users to get spam (and ham) into the Bayes sa-learn. Dan Kohn suggestions is at http://www.dankohn.com/archives/000323.html. After special handling for mail previously processed by SA that is now

[SAtalk] sa-learn scripts for mbox files

2003-11-23 Thread Daniel Sterling
I wrote some small scripts to take an mbox file (like you would find in /var/spool/mail), split the messages apart, and send them to sa-learn. sa-learn does not split messages apart itself (at least in version 2.60). Check it out at http://www.lost-habit.com/learnscripts.html . Nice if you have a

[SAtalk] Really bad Infoworld article

2003-11-23 Thread Jeremy Dold
Does someone want to respond to this guy and point out the obvious? http://www.infoworld.com/article/03/11/14/45FEspam_1.html?s=tc --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more

[SAtalk] Rules, rules and more rules

2003-11-23 Thread Alan Munday
Having only recently installed SA I'd like to ask about the various rules files that abound. Is there a listing of the common rules and their target? Are they all just a matter of dropping the .ch into the SA configuration directory, or is it best to edit before deploying? Are there any

[SAtalk] Double bounce sa-learn

2003-11-23 Thread Adam D. Lopresto
Recently I got sick of seeing the queue on my SpamAssassin gateway full of double bounces that will never be delivered, but still have to hang around for four days before they timeout. I found the DoubleBounceAddress setting in sendmail, and was about to send the messages to the bit bucket, when

Re: [SAtalk] Why Bayes is so essential

2003-11-23 Thread Damian Gerow
Thus spake Dan Kohn ([EMAIL PROTECTED]) [20/11/03 14:35]: Here is a spam that should convince people to turn on Bayes. This Nigerian spam was almost certainly continually resent against SpamAssassin 2.60. Each time, the words were altered slightly until none of the rules fired. However,

[SAtalk] header x-spam-status problem

2003-11-23 Thread Stephen Lau
I've got a user on my system whose spam doesn't seem to be marked correctly. It comes in marked as [SPAM] in the subject, but the X-Spam-Status header seems to be incorrect. (SA works properly for all other users on my system, so i'm not sure what the problem is) Example below: the

Re: [SAtalk] sa-learn scripts for mbox files

2003-11-23 Thread Pedro Sam
On November 23, 2003 04:46 am, Daniel Sterling wrote: I wrote some small scripts to take an mbox file (like you would find in /var/spool/mail), split the messages apart, and send them to sa-learn. sa-learn does not split messages apart itself (at least in version 2.60). sa-learn --mbox ? --

Re: [SAtalk] header x-spam-status problem

2003-11-23 Thread Martin Radford
At Fri Nov 21 02:09:31 2003, Stephen Lau wrote: I've got a user on my system whose spam doesn't seem to be marked correctly. It comes in marked as [SPAM] in the subject, but the X-Spam-Status header seems to be incorrect. (SA works properly for all other users on my system, so i'm not sure

Re: [SAtalk] RE: *.easynet.nl DNSBL's ceasing on Dec 1, 2003 [OT]

2003-11-23 Thread Gary Carr
Yeah, I hear ya. Don't blame him but hoping someone will pick it up and run with it. Gary How about *YOU* do it for a fee and make it a small business? =P Don't have the time? Oh...neither does he. *Sigh* To the *.easynet.nl DNSBL maintainer (even though you may not read this

[SAtalk] Question for developpers: Who maintain now php-sa-mysql!

2003-11-23 Thread scalex
Hello SA users, I have SA installed and working fine with mysql database. According to sa docs, must exist a PHP Interface called php-sa-mysql-n.n which can be downloaded from http://spamassassin.org/devel/... I checked out this URL, and not found what i'm looking for. Asking google about

Re: [SAtalk] Really bad Infoworld article

2003-11-23 Thread Martin Radford
At Fri Nov 21 23:34:35 2003, Jeremy Dold wrote: Does someone want to respond to this guy and point out the obvious? http://www.infoworld.com/article/03/11/14/45FEspam_1.html?s=tc It's a bit embarrassing for the journalist that he was happy to contact technical support for at least one of the

Re: [SAtalk] Really bad Infoworld article

2003-11-23 Thread Carl R. Friend
On Fri, 21 Nov 2003, Jeremy Dold wrote: Does someone want to respond to this guy and point out the obvious? http://www.infoworld.com/article/03/11/14/45FEspam_1.html?s=tc I haven't been able to properly ascertain the author's various connections to commercial ventures, but in this

Re: [SAtalk] Really bad Infoworld article

2003-11-23 Thread Fred
I gave this guy a piece of my mind! The guy wasn't smart enough to update his SA install, he used 2.44 because it came with the RH9 disks he had. No wonder he had a hard time finding support, that software is outdated! Frederic Tarasevicius Internet Information Services, Inc.

Re: Re[2]: [SAtalk] What is marked as spam

2003-11-23 Thread Martin Radford
At Sun Nov 23 06:30:46 2003, Robert Menschel wrote: Do you have Bayes turned on? Bayes is a life saver here. JO I have no idea. How would I know? 1) Check the headers of emails processed by SA. If they include an autolearn=(no, or ham, or spam), then I believe Bayes is turned on. I'm

Re: [SAtalk] Really bad Infoworld article

2003-11-23 Thread Terry Milnes
And now for the real world. I was asked a year ago to come up with a solution for spam filtering, in a multiple domain, multiple user environment ( 4,400 users). After extensive research I recommended SA. I installed SA on my system and ran it for about a month, it was an older version

Re: [SAtalk] [OT] Switching OS for Gateway

2003-11-23 Thread Skylar Thompson
On Mon, Nov 17, 2003 at 09:01:24PM -0500, Larry Gilson wrote: I am running Postfix with SA, Procmail, and Webmin on Red Hat 8.0. I want to move away from RH and am soliciting opinions. I figure that for me, I have 3 viable choices: FreeBSD, Debian, and Slackware. I want a free OS so I don't

Re: [SAtalk] Meaning of spamassassin -a option

2003-11-23 Thread Terry Milnes
From spamassassin man page: -a, --auto-whitelist, --whitelist Use auto-whitelists. Auto-whitelists track the long-term average score for each sender and then shift the score of new messages toward that long-term average. This can increase or decrease the score for messages, depending on the

Re: [SAtalk] [OT] Switching OS for Gateway

2003-11-23 Thread Jonathan Nichols
Skylar Thompson wrote: On Mon, Nov 17, 2003 at 09:01:24PM -0500, Larry Gilson wrote: I am running Postfix with SA, Procmail, and Webmin on Red Hat 8.0. I want to move away from RH and am soliciting opinions. I figure that for me, I have 3 viable choices: FreeBSD, Debian, and Slackware. I want

Re: [SAtalk] Really bad Infoworld article

2003-11-23 Thread Kenneth Porter
--On Sunday, November 23, 2003 8:35 AM -0500 Fred [EMAIL PROTECTED] wrote: I gave this guy a piece of my mind! Care to cc a copy to the SA list? Hopefully you don't mean that you were antagonistic. Too many open source advocates sound like the crazy aunt in the attic, which alienates the

RE: [SAtalk] Really bad Infoworld article

2003-11-23 Thread Bill
And now for the real world. only 50 or less users: Brightmail$ 2,998 for 2 years FrontBridge $ 2,700 for 2 years Postini $ 2,700 for 2 years ProofPoint$ 2,000 for 2 years SpamAssassin $ 3,100 for 2 years That assumes that the small company

[SAtalk] Score

2003-11-23 Thread Alan Munday
Just had a mail in which had different *'s and score. I was expecting these to be the same as I egrep the file and count the stars in post processing. X-Spam-Level: X-Spam-Status: No, hits=5.0 required=5.0 tests=BAYES_20,HTML_30_40,

Re: [SAtalk] DNSBL observations and a couple of questions

2003-11-23 Thread john_galt
On Fri, 21 Nov 2003 21:41:23 -0800 John Oliver [EMAIL PROTECTED] wrote: Here are the dnsbls I use, the order I use them in, and the number of matches in the current maillog: [EMAIL PROTECTED] joliver]$ ./spam.sh cbl.abuseat.org 4342 dynablock.easynet.nl 1938 sbl.spamhaus.org

[SAtalk] Running rbldnsd

2003-11-23 Thread Mark
: ip4set:dynablock.my-domain.info: 20031123 174253: \ e32/24/16/8=372826/241350/1001/0 rbldnsd: generic:zoneheader.dynablock.my-domain.info: 20031123 183814: e=3 rbldnsd: version 0.96 (29 May 2003) started (listening on [127.0.0.1]:53) Yet, I cannot get any query to resolve on it: % nslookup 218.65.86.15

[SAtalk] Forged MUA on Outlook2003?

2003-11-23 Thread mwestern
Hi All, Outlook 2003 comes up with FORGED_MUA_OUTLOOK. obviously i can change the score in this to not score this any more. I don't know how to fix rules as i'm not a regex guru. anyone know how to fix this? or even how that one works? hehe. some would say all outlook should be classed as

RE: [SAtalk] Score

2003-11-23 Thread Mike Kuentz (2)
The score rounds up. If you pass the -e option spamassassin will exit with a non-zero exit code if it spam, but not with a hit count. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan Munday Sent: Sunday, November 23, 2003 4:58 PM To: [EMAIL

Re: [SAtalk] Score

2003-11-23 Thread Martin Radford
At Sun Nov 23 21:57:43 2003, Alan Munday wrote: Just had a mail in which had different *'s and score. I was expecting these to be the same as I egrep the file and count the stars in post processing. X-Spam-Level: X-Spam-Status: No, hits=5.0 required=5.0

Re: [SAtalk] Score

2003-11-23 Thread Simon Byrnand
At 21:57 23/11/2003 +, Alan Munday wrote: Just had a mail in which had different *'s and score. I was expecting these to be the same as I egrep the file and count the stars in post processing. X-Spam-Level: X-Spam-Status: No, hits=5.0 required=5.0 tests=BAYES_20,HTML_30_40,

RE: [SAtalk] Really bad Infoworld article

2003-11-23 Thread Upwood, Jim
Just an FYI, when I roll out SA to a client, I include $500/year charge for software upgrades, this way they always stay current. It is easier to get that $$ up front than down the road. Software upgrades are done in the comfort of my house, using SSH and webmin, usually taking only a couple

RE: [SAtalk] Score

2003-11-23 Thread Alan Munday
Thanks... Didn't think to look at the FAQs (Which I normally do). Shows you what happens when you act on impulse. Alan -Original Message- From: Martin Radford [mailto:[EMAIL PROTECTED] Sent: 23 November 2003 22:34 To: Alan Munday Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] Score

RE: [SAtalk] Rules, rules and more rules

2003-11-23 Thread Alan Munday
Thanks to all who responded to me with hints and suggestions. I had seen all the web sites mentioned but had not completely understood how they all fitted together. Maybe a topic for the FAQ? I've tried adding a fair number of rules and, noting comments made, had the notion of asking if it would

RE: [SAtalk] Score

2003-11-23 Thread Alan Munday
Thanks Simon I am using stars as I used the Advosys how-to as my starting point. I've started playing with the scripts and wondered if SA left any variables set e.g. hit value, that I could use rather than re-reading the file as I thought this would be much quicker. I count the actual values as I

Re: [SAtalk] Double bounce sa-learn

2003-11-23 Thread Robert Menschel
Hello Adam, Thursday, November 20, 2003, 2:13:24 PM, you wrote: ADL Recently I got sick of seeing the queue on my SpamAssassin gateway full of ADL double bounces that will never be delivered, ... Would http://www.exit0.us/index.php/VirusBounceRules help? Bob Menschel

Re: [SAtalk] Rules, rules and more rules

2003-11-23 Thread Robert Menschel
Hello Alan, Friday, November 21, 2003, 3:12:25 AM, you wrote: AM Having only recently installed SA I'd like to ask about the various AM rules files that abound. AM Is there a listing of the common rules and their target? See http://www.exit0.us and subsequent links. Bob Menschel

Re: [SAtalk] Score

2003-11-23 Thread Robert Menschel
Hello Alan, Sunday, November 23, 2003, 1:57:43 PM, you wrote: AM Just had a mail in which had different *'s and score. ... AM X-Spam-Level: AM X-Spam-Status: No, hits=5.0 required=5.0 tests=... AM Is there a simple explanation for this? Very simple -- hits is rounded to one decimal

RE: [SAtalk] Score

2003-11-23 Thread Richard Bewley
Hi, I believe this is an FAQ. But, basically, it rounds that number to one decimal place. So, if your score was really 4.978, it would list 4 stars, be below the 5.0 threshold, but round to 5.0 on the hits indicator. Hope that helps, Richard -Original Message- From: [EMAIL PROTECTED]

[SAtalk] Re[2]: http://www.infoworld.com/article/03/11/14/45FEspam_1.html?s=tc

2003-11-23 Thread Robert Menschel
Hello Logan, Sunday, November 23, 2003, 2:51:18 PM, you wrote: LH The point of using the old version of SpamAssassin was to show how LH much the technology has changed in the last few years. That was LH stated in my original article but edited out of the final version. (I LH love copy editors.)

RE: [SAtalk] Rules, rules and more rules

2003-11-23 Thread jennifer
Hi Alan -Original Message- From: [EMAIL PROTECTED] [mailto:spamassassin- [EMAIL PROTECTED] On Behalf Of Alan Munday Sent: Sunday, November 23, 2003 6:03 PM To: [EMAIL PROTECTED] Subject: RE: [SAtalk] Rules, rules and more rules Thanks to all who responded to me with hints and

RE: [SAtalk] Score

2003-11-23 Thread Simon Byrnand
At 23:01 23/11/2003 +, Alan Munday wrote: Thanks Simon I am using stars as I used the Advosys how-to as my starting point. I've started playing with the scripts and wondered if SA left any variables set e.g. hit value, that I could use rather than re-reading the file as I thought this would

RE: [SAtalk] Rules, rules and more rules

2003-11-23 Thread Alan Munday
Jennifer Thanks for the response. A good point with respect to the on/off nature of some of the rule sets. More info for the FAQ? I had been directed at your site and have installed those rules recommended by Bob Menschel. I wish to say a thank you to all the sa rules contributors for your

[SAtalk] RBL tests timing out

2003-11-23 Thread Russ Ringer
I have a SA 2.60 new install. Net::DNS is working fine. skip_rbl_checks 0 Debug shows debug: RBL: success for 0 of 18 queries, all of them timing out, even with a large timeout values. Manual lookup of IP at RBL returns whatever code it's supposed to (like 127.0.0.2) What else could be causing SA

[SAtalk] Re: http://www.infoworld.com/article/03/11/14/45FEspam_1.html?s=tc

2003-11-23 Thread Bryan Hoover
Man, that article is indeed rather damning - in affect, though unlikely effect. The article, flagrantly irresponsible, says more about the magazine, and the author, than any commentary about the reality of SA's effectiveness as an anti-spam tool. The fact that older SA versions don't hold up

[SAtalk] $VHOME/.spamassassin/user_prefs not create!

2003-11-23 Thread Roberto Marzialetti
hi all! i installed qmail+vpopmail+qmailadmin+SpamAssassin, on a slackware 9.0. it works fine, but i've got a little-big problem with SA (or vpopmail :o). i start spamassassin, in demon mode via spamd, with options -a -c -v -u vpopmail but it doesn't create dir ~/.spamassassin/user_prefs in

Re: [SAtalk] Really bad Infoworld article

2003-11-23 Thread Antony Stone
On Sunday 23 November 2003 9:05 pm, Kenneth Porter wrote: --On Sunday, November 23, 2003 8:35 AM -0500 Fred [EMAIL PROTECTED] wrote: I gave this guy a piece of my mind! Care to cc a copy to the SA list? Hopefully you don't mean that you were antagonistic. Too many open source advocates

[SAtalk] Rule Length

2003-11-23 Thread Andrew
Hi Everyone, Does anybody know if there is any limit for the character length of a rule? (so - '/RULE/' 254 characters)? I'm just setting up a database to hold my rules. So I am just deciding if I should use a Memo field or not for the rule? Thanks. Regards, Andrew

Re: [SAtalk] sa-learn scripts for mbox files

2003-11-23 Thread Matt Kettler
At 06:40 AM 11/23/03 -0500, Pedro Sam wrote: On November 23, 2003 04:46 am, Daniel Sterling wrote: sa-learn does not split messages apart itself (at least in version 2.60). sa-learn --mbox ? I second pedro's motion.. sa-learn DOES accept mbox files and split them appart itself, and has done so

[SAtalk] Another plea...

2003-11-23 Thread Rubin Bennett
Dear list... (See what happens when I get a question answered? I come up with more...) Is there (I hope!!!) a way to tell spamd not to accept connections if the system load is at or above a certain threshold? (i.e. if the system load is currently 30, don't spawn anymore spamd processes)? I

[SAtalk] 'add_header' ignored? (SA 2.60 on FreeBSD 4.7)

2003-11-23 Thread Angus McIntyre
I've installed SpamAssassin 2.6 on a system running FreeBSD 4.7, Perl 5.6.1. SpamAssassin (or, strictly, spamc/spamd) is invoked by qmail_scanner_1.16. The messages processed by SpamAssassin come through with a header that says something like: X-Spam-Status: Yes, hits=5.5 required=5.0 My

Re: [SAtalk] Another plea...

2003-11-23 Thread Matthew Cline
On Sunday 23 November 2003 07:40 pm, Rubin Bennett wrote: Dear list... (See what happens when I get a question answered? I come up with more...) Is there (I hope!!!) a way to tell spamd not to accept connections if the system load is at or above a certain threshold? (i.e. if the system

Re: [SAtalk] What is marked as spam

2003-11-23 Thread Matt Kettler
At 07:56 PM 11/22/03 -0800, John Oliver wrote: 1) The Swen virus is not spam. It should be caught by anti-virus software, not by anti-spam software. It's email that I don't want. It has a predictable From: and/or Subject: and so should be able to be scored very high. Agreed that swen emails may

Re: [SAtalk] 'add_header' ignored? (SA 2.60 on FreeBSD 4.7)

2003-11-23 Thread Matt Kettler
At 10:52 PM 11/23/03 -0500, Angus McIntyre wrote: Can anyone tell me what I'm overlooking? Is there some magic switch required to get SpamAssassin to honor 'add_header' instructions? First, run spamassassin --lint.. just as a sanity check. Then I'd start checking very closely to be sure that the

[SAtalk] Re:[SAtalk][OT]SwitchingOSforGateway

2003-11-23 Thread Miroslav Ris
i am use both freebsd and gentoo linux. gentoo using ports system like freebsd. exim+exiscan+spamassassin. working good for me. -- Miroslav Ris Skylar Thompson said: On Mon, Nov 17, 2003 at 09:01:24PM -0500, Larry Gilson wrote: I am running Postfix with SA, Procmail, and Webmin on Red Hat

RE: [SAtalk] bayes learning

2003-11-23 Thread Fritz Mesedilla
I ran it and this is what I got: spamassassin -D --lint debug: Score set 0 chosen. debug: running in taint mode? yes debug: Running in taint mode, removing unsafe env vars, and resetting PATH debug: PATH included '/usr/local/sbin', keeping. debug: PATH included '/usr/local/bin', keeping. debug:

RE: [SAtalk] bayes learning

2003-11-23 Thread Fritz Mesedilla
When I ran this... I got: sa-learn --dump Use of uninitialized value in numeric lt () at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/BayesStore.pm line 1281. 0.000 0 0 0 non-token data: bayes db version 0.000 0 0 0 non-token data:

[SAtalk] bayes

2003-11-23 Thread Thomas Kinghorn
Hi List. Running spamd with the -D option, i get the following line regarding bayes: debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB 200 The bayes DB has been trained with quite a few hubdred spams, but no hams. Would that cause the above condition? Many thanks Regards,

[SAtalk] bayes.lock problem

2003-11-23 Thread Thomas Kinghorn
Hi List. What would cause the following error? Cant find any usefull info regarding this. Just came back from sick-leave and my server has gone for a ball of you-know-what My apologies for the post. snip debug: bayes: score = 1 debug: Syncing Bayes journal and expiring old tokens... debug: