[SAtalk] required hits

2003-11-25 Thread Fritz Mesedilla
What is the difference between .spamassassin's user_prefs: # How many hits before a mail is considered spam. # required_hits 5 And amavisd-new's # default values, can be overridden by more specific lookups, e.g. SQL #$sa_tag_level_deflt = 0; # add spam info headers if at, or above that

RE: [SAtalk] What level to delete at?

2003-11-25 Thread Dirk Kulmsee
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Simon Byrnand Sent: Tuesday, November 25, 2003 4:29 AM To: Matt Chapman; [EMAIL PROTECTED] Subject: Re: [SAtalk] What level to delete at? I'd say most people probably don't delete automatically

RE: [SAtalk] bayes learning

2003-11-25 Thread Fritz Mesedilla
Yes I have dB_file installed (version 1.806). My amavisd-new is running under amavis. my $MYHOME var is set to its default (/var/amavis). These are what are under /var/amavis/.spamassassin/ -rw--- 1 amavis amavis 86016 Nov 25 15:15 bayes_seen -rw--- 1 amavis amavis

[SAtalk] score failure test

2003-11-25 Thread Fritz Mesedilla
What happened to this mail? Content analysis details: (0.3 points, 5.0 required) pts rule name description -- -- 0.3 NO_REAL_NAME From: does not include a real name How come it was blocked with

[SAtalk] Re: What level to delete at?

2003-11-25 Thread Scott A Crosby
On Mon, 24 Nov 2003 22:07:56 -0500, Greg Cirino - Cirelle Enterprises [EMAIL PROTECTED] writes: Scott wrote: | Having a single spam folder is a very bad decision | I never delete automatically, but the high catagory gets a 10 second | glance every week, medium gets 20 seconds every week,

Re: [SAtalk] Re: What level to delete at?

2003-11-25 Thread Pedro Sam
On November 25, 2003 03:35 am, Scott A Crosby wrote: [snip] If its a webmail application, perhaps you should offer an option with a very low threshold (I go as low as 2), but sort all of the 'quarantined' emails by SA score, showing lowest first. When you run low on space, you don't delete the

[SAtalk] Failed to run NO_DNS_FOR_FROM

2003-11-25 Thread Jose Luis Garcia
Hi all: I have some errors in my log file: Failed to run NO_DNS_FOR_FROM SpamAssassin test, skipping: ^I(Undefined subroutine Net::DNS::mx called at /usr/lib/perl5 /site_perl/5.6.1/Mail/SpamAssassin/EvalTests.pm line 108, GEN717 line 44. ) Nov 25 12:06:13 afrodita spamd[28704]: clean message

Re: [SAtalk] What level to delete at?

2003-11-25 Thread Matt Chapman
what is the setup that allows the users to check the queue for there mail and then send it on...? -matt chapman On Nov 24, 2003, at 9:37 PM, Richard Bewley wrote: Hello, We get approximately 1 gig of mail per day, and our system catches (yesterday at least) 41,185 spam messages per day. This

RE: [SAtalk] bayes learning

2003-11-25 Thread JC
Do you have spamassassin running as root? If not, log on as the user that spamassassin runs as, and try the test again. Original Message- From: Fritz Mesedilla [mailto:[EMAIL PROTECTED] Yes I have dB_file installed (version 1.806). My amavisd-new is running under amavis. my $MYHOME var

Re: [SAtalk] An Open Letter to the SA-talk forum

2003-11-25 Thread Frederick M Avolio
At 06:13 AM 11/25/2003 +0100, Mark wrote: Is SA hard to install? Not harder than any other program based on Perl. Perl is the underlying engine, which, in and by itself, has nothing to do with SA. It is good to keep that in mind; Perhaps this is *my* problem. November 14 I mentioned having

Re: [SAtalk] An Open Letter to the SA-talk forum

2003-11-25 Thread Terry Milnes
Frederick M Avolio wrote: At 06:13 AM 11/25/2003 +0100, Mark wrote: Is SA hard to install? Not harder than any other program based on Perl. Perl is the underlying engine, which, in and by itself, has nothing to do with SA. It is good to keep that in mind; Perhaps this is *my* problem. November

Re: [SAtalk] report_safe attatches all mail?

2003-11-25 Thread Adam Denenberg
wierd.. i dont seen any headers being preserved. This is the very top of one of my rewritten spam emails. Received: from localhost [127.0.0.1] by nymx1.domain.com MIME-Version: 1.0 Content-Type: multipart/mixed; boundary=--=_3FC2CB65.290EBCFE This is a multi-part message in MIME format.

[SAtalk] spamassassin and Exchange 2000

2003-11-25 Thread gentian
Hi there, I am using Exchange 2000 as an email server and i am having troubles with spam emails. I am thinking to put a spam filter for Exchange 2000. I was thinking on using Spam Assasin on a Linux box (or maybe windows machine). But i was just wondering if anybody has tried Spamassasin

[SAtalk] Slashdotted.

2003-11-25 Thread Michael H. Collins
http://slashdot.org/articles/03/11/25/1314226.shtml?tid=126tid=163 -- Michael H. Collins Admiral, Penguinista Navy It's us against them. Ride like you stole it! http://linuxlink.com --- This SF.net email is sponsored by: SF.net Giveback

RE: [SAtalk] What level to delete at?

2003-11-25 Thread Richard Bewley
Well, it's something that I wrote, but basically, I'm using Postfix and Spamassassin. Spamassassin tags messages as [SPAM]. In a Postfix header_check, anything that is tagged by SpamAssassin gets status HOLD. Whatever isn't held is passed to IMail. Those that are held are put in

RE: [SAtalk] spamassassin and Exchange 2000

2003-11-25 Thread Yackley, Matt
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of gentian Sent: Tuesday, November 25, 2003 8:21 AM To: [EMAIL PROTECTED] Subject: [SAtalk] spamassassin and Exchange 2000 Hi there,

Re: [SAtalk] score failure test

2003-11-25 Thread Matt Kettler
At 04:24 PM 11/25/03 +0800, Fritz Mesedilla wrote: What happened to this mail? Content analysis details: (0.3 points, 5.0 required) pts rule name description -- -- 0.3 NO_REAL_NAME From: does not

[SAtalk] Odd errors after upgrade to 2.60

2003-11-25 Thread Dave Goodrich
Good morning, I've been running Spamassassin since 2.43 and we are quite happy with it. I just finished an upgrade from 2.55 to 2.60 and seemed to go well. I upgraded two servers, boith configured identically, with same software,OS, etc installed. SPARC 20, Solaris 2.6 Spamassassin 2.60 qmail

RE: [SAtalk] spamassassin and Exchange 2000

2003-11-25 Thread Paul Hutchings
I do just that (with Exchange 5.5) and it works great. I went with Redhat 9, Postfix and Spamassassin, mostly as per this little guide - http://postfix.cnc.bc.ca/twiki/bin/view/Main/SpamAssassinTaggingOnly regards,Paul--Paul HutchingsNetwork Administrator, MIRA Ltd.Tel: 44 (0)24 7635 5378,

[SAtalk] InfoWorld article hits Slashdot...

2003-11-25 Thread Zak McGregor
Hi all The InfoWorld article has just hit Slashdot (http://www.slashdot.org/) Good vehicle to reverse the bad publicity methinks. Ciao Zak -- http://www.carfolio.com/Searchable database of 10 000+ car specs

RE: [SAtalk] lock failed: little help

2003-11-25 Thread JC
I was getting this error a while back. I'm sorry that I can't remember what exactly I did to fix it, could you provide a little more detail? Hopefully ittl jog my memory. -Original Message- From: German Staltari [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2003 9:31 AM To: [EMAIL

RE: [SAtalk] paris hilton

2003-11-25 Thread Jennifer Wheeler
Hi Ian -Original Message- From: [EMAIL PROTECTED] [mailto:spamassassin- [EMAIL PROTECTED] On Behalf Of ian douglas Sent: Monday, November 24, 2003 8:42 PM To: [EMAIL PROTECTED] Subject: RE: [SAtalk] paris hilton Haven't seen the spam but one of these should work if your

Re: [SAtalk] What level to delete at?

2003-11-25 Thread Charles Gregory
On Mon, 24 Nov 2003, Matt Kettler wrote: What are some of the setups out there? What score do you delete at? On our system (CommunityNet ISP) we allow our inidividual users to set their 'Hits Required' level, and choose between deleting or merely flagging the mail. We encounter some confusion

[SAtalk] (no subject)

2003-11-25 Thread Kurt Yoder
Terry Milnes said: Frederick M Avolio wrote: At 06:13 AM 11/25/2003 +0100, Mark wrote: Is SA hard to install? Not harder than any other program based on Perl. Perl is the underlying engine, which, in and by itself, has nothing to do with SA. It is good to keep that in mind; Perhaps

RE: [SAtalk] What level to delete at?

2003-11-25 Thread Richard Bewley
As there are several people who seem to be interested in my queueing system, I think I'll put something together, but keep in mind it will only work if you have postfix setup a certain way, so in most setups it isn't really an option. I would be willing to take on some contract work setting up

RE: [SAtalk] lock failed: little help

2003-11-25 Thread JC
Actually, I think I remembered! I think what I did was to run sa-learn --rebuild *on the correct db directory* I'm pretty sure it has to be a directory. Anyways, let me know if that works out for you! =-) Good luck! -J.C. -Original Message- From: German Staltari [mailto:[EMAIL

Re: [SAtalk] report_safe attatches all mail?

2003-11-25 Thread Adam Denenberg
On Tue, 2003-11-25 at 09:47, Theo Van Dinter wrote: On Tue, Nov 25, 2003 at 09:06:28AM -0500, Adam Denenberg wrote: shouldnt the original from be preserved up top? If there was a from in the original, it should be in the encapsulated message. Feel free to open a bugzilla ticket, and attach

Re: [SAtalk] report_safe attatches all mail?

2003-11-25 Thread Adam Denenberg
On Tue, 2003-11-25 at 09:47, Theo Van Dinter wrote: On Tue, Nov 25, 2003 at 09:06:28AM -0500, Adam Denenberg wrote: shouldnt the original from be preserved up top? If there was a from in the original, it should be in the encapsulated message. Feel free to open a bugzilla ticket, and attach

Re: [SAtalk] lock failed: little help

2003-11-25 Thread German Staltari
On Tue, 25 Nov 2003 10:36:55 -0500, JC [EMAIL PROTECTED] wrote: Actually, I think I remembered! I think what I did was to run sa-learn --rebuild *on the correct db directory* I'm pretty sure it has to be a directory. Anyways, let me know if that works out for you! Thanks for your help, but It's

RE: [SAtalk] mysql spamc ignores the email in mailling list

2003-11-25 Thread Rob Hutton
Unfortunately, this is not true. Using Amavis from postfix or sendmail as a content filter results in exactly the same situation. The email is sent from postfix to amavis exactly once with all of the adresses, not once for each address. The only way arround this currently (without writing code)

Re: [SAtalk] An Open Letter to the SA-talk forum

2003-11-25 Thread Brook Humphrey
On Tuesday 25 November 2003 05:18 am, Frederick M Avolio wrote: Yesterday I again tried to install 2.60 on RedHat Linux 7.3. This is your problem^^ I undersntad that that is the only thing that some corporate types will support but it is very badly out

[SAtalk] New to Spamassassin

2003-11-25 Thread McWhirter,Julia
I have the following setup Sendmail 8.12.10 Mimedefang 2.37 Spamassassin 2.55 All running under Solaris 8 How can I get spamassassin to recognise the attached e-mail as spam. I have looked through the tests on the spamassassin web site, but to no avail. Thanks in advance.

RE: [SAtalk] An Open Letter to the SA-talk forum

2003-11-25 Thread Stewart, John
Is SA hard to install? Not harder than any other program based on Perl. While I agree it is not a good idea to compare SA 2.44 to current commercial anti-spam packages, I think those of you who say that SA is easy to install are being a little bit disingenuous. It has a whole laundry list of

RE: [SAtalk] paris hilton

2003-11-25 Thread Chris Santerre
-Original Message- From: ian douglas [mailto:[EMAIL PROTECTED] Sent: Monday, November 24, 2003 6:46 PM To: [EMAIL PROTECTED] Subject: [SAtalk] paris hilton Anyone have any good obfuscation rules for p4r1s h1|+0n spam? I'm getting a ton of these every day... -id I can't

Re: [SAtalk] Failed to run NO_DNS_FOR_FROM

2003-11-25 Thread Matt Kettler
At 05:28 AM 11/25/2003, Jose Luis Garcia wrote: Failed to run NO_DNS_FOR_FROM SpamAssassin test, skipping: ^I(Undefined subroutine Net::DNS::mx called at /usr/lib/perl5 /site_perl/5.6.1/Mail/SpamAssassin/EvalTests.pm line 108, GEN717 line 44. ) Hmm, that almost sounds like your Net::DNS perl

[SAtalk] Rule for gappy text?

2003-11-25 Thread Bret Miller
Title: Message Anyone have a good rule for catching gappy text like the following message. It seems like with all the nice rules we have to catch hidden HTML tags, that writing a simple rules to catch a bunch of underscores or dots shouldn't be so hard... but then, I still need to study

[SAtalk] Nigerian-type scores 0.00

2003-11-25 Thread Christopher X. Candreva
Wow -- here's a Nigerian type spam that scored 0.00 . I've just submit it to DCC and leared in my bayes. Posted here if anyone wants to add to rulesets. -Chris == Chris Candreva -- [EMAIL PROTECTED] -- (914) 967-7816 WestNet Internet

Re: [SAtalk] What level to delete at?

2003-11-25 Thread Christopher X. Candreva
On Mon, 24 Nov 2003, Matt Chapman wrote: I have been deleting at a score of 5 via Mimedefang. I notice that some spam is scoring at 3.5 and 4ish. Is is better to tag at say 3-4.9 and delete if it is any higher? For my mail, I wouldn't auto-delete anything below 10

Re: [SAtalk] An Open Letter to the SA-talk forum

2003-11-25 Thread Frederick M Avolio
At 06:39 AM 11/25/2003 -0800, Brook Humphrey wrote: On Tuesday 25 November 2003 05:18 am, Frederick M Avolio wrote: Yesterday I again tried to install 2.60 on RedHat Linux 7.3. This is your problem^^ I undersntad that that is the only thing that some

[SAtalk] Bayesian 100% on all my mail

2003-11-25 Thread Aaron Young
I've been using SpamAssassin since about May. Recently I started getting a lot of false positives with SA 2.60. I noticed that all my mail was getting a bayesian score of 99 to 100%. I'm not exactly sure why it was happening. My best guess is that since the bayes database only holds a limited

Re: [SAtalk] (no subject)

2003-11-25 Thread Christopher X. Candreva
On Thu, 20 Nov 2003, mairhtin o'feannag wrote: I have one client who wants to receive any emails they get, irrespective of SPAM (they suspect that there are legitimate emails being eliminated as spam). What they want is that anything that is addressed to them (yadayada.com) be sent through

Re: [SAtalk] New to Spamassassin

2003-11-25 Thread Matt Kettler
At 11:06 AM 11/25/2003, McWhirter,Julia wrote: I have looked through the tests on the spamassassin web site, but to no avail. 1) that's not a complete email it's only a body with partial headers, thus nobody will be able to test it against spamassassin. 2) these kind of obfuscating strings are

RE: [SAtalk] An Open Letter to the SA-talk forum

2003-11-25 Thread Rikhardur.EGILSSON
-Original Message- From: Brook Humphrey [mailto:[EMAIL PROTECTED] Sent: 25 November, 2003 3:40 PM To: [EMAIL PROTECTED] Subject: Re: [SAtalk] An Open Letter to the SA-talk forum On Tuesday 25 November 2003 05:18 am, Frederick M Avolio wrote: Yesterday I again tried to install 2.60 on

Re: [SAtalk] An Open Letter to the SA-talk forum

2003-11-25 Thread Brook Humphrey
On Tuesday 25 November 2003 08:37 am, you wrote: So, SA 2.60 will only run with RH Linux 7.3? I suspect it really is a problem with the version of Perl I am running. But there is no dependency for a particular version of Perl listed. (I am running v5.6.1 built for i386-linux.) ah no i was

Re: [SAtalk] A faster and more scalable matching engine.

2003-11-25 Thread Christopher X. Candreva
On Tue, 25 Nov 2003, Scott A Crosby wrote: How happy are people with the performance of SA, especially with all of thee new rules? The reason I ask is that I'm on-again, off-again I think a faster engine is a great idea, no matter what. Spam is growing -- even if our servers are big enough

RE: [SAtalk] spamassassin and Exchange 2000

2003-11-25 Thread Marvin Raab
Same with me at 3 separate locations; one with Exch 5.5 and two with Exch 2000. It works great! In my setup, SA has little to do with Exch. It's a separate server which MX points to and then the Linux box forwards all mail to Exch after running SA. The users have Outlook Rules to move [SPAM]

[SAtalk] SpamScore check

2003-11-25 Thread Nick Tong
Dear community, I send out email news letters each week for my clients but I want to offer them the ability to see if there emails will be blocked due to there email containing a large amount of spam scoring text? Does anyone out there know of a plug-in for spamassassin or any other

RE: [SAtalk] spamassassin and Exchange 2000

2003-11-25 Thread Paul Hutchings
The thing that struck me, and admittedly this is coming from a Windows background, is the sheer amount of stuff you can do with an MTA like Postfix (or, I suspect most *nix MTAs). Little things like being able to export a list of valid users to avoid all the dictionary spam, being able to RBL

RE: [SAtalk] An Open Letter to the SA-talk forum

2003-11-25 Thread Todd Schuldt
We were running SA2.6 on Rh7.3 here but only after we updated Perl to 5.6.1 (or was it 5.8 - don't remember offhand). We had no major issues once Perl was done (couple script changes here and there and changing local.cf around) - we have since moved to SuSE 9 Pro since RH is dropping 7.3 and 8.0

[SAtalk] Is there a spamd config file?

2003-11-25 Thread Douglas Kirkland
I am looking to have a spamd config file and been unable to find one. I may have missed it. Otherwise I will have to have a very long line to configure spamd the way I want it to run. The reason is because there is over 200 IP addresses that i want to restrict spamd to listen to. These IP

Re: [SAtalk] Rule for gappy text?

2003-11-25 Thread Matt Kettler
At 11:49 AM 11/25/2003, Bret Miller wrote: Anyone have a good rule for catching gappy text like the following message. It seems like with all the nice rules we have to catch hidden HTML tags, that writing a simple rules to catch a bunch of underscores or dots shouldn't be so hard... but then, I

Re: [SAtalk] A faster and more scalable matching engine.

2003-11-25 Thread Roger Merchberger
At 03:27 11/25/2003 -0600, Scott A Crosby wrote: I mentioned this about a year ago, but now that people are starting to write rulesets with hundreds to thousands of new rules, I thought I'd bring it up again. How happy are people with the performance of SA, especially with all of thee new rules?

RE: [SAtalk] SpamScore check

2003-11-25 Thread Rubin Bennett
If you have access to a spamassassin binary, you can do the same thing on any system (i.e. install SA on your system and run the message through). Another simple way to do it would be to simply send the mail to yourself (assuming you have SA on a server somewhere filtering your emails) and

Re: [SAtalk] SpamScore check

2003-11-25 Thread Evan Platt
--On Tuesday, November 25, 2003 5:12 PM + Nick Tong [EMAIL PROTECTED] wrote: Dear community, I send out email news letters each week for my clients but I want to offer them the ability to see if there emails will be blocked due to there email containing a large amount of spam

RE: [SAtalk] SpamScore check

2003-11-25 Thread Nick Tong
If so is this possible on a windows platform? Nick Tong -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Tong Sent: 25 November 2003 17:12 To: [EMAIL PROTECTED] Subject: [SAtalk] SpamScore check Dear community, I send

Re: [SAtalk] An Open Letter to the SA-talk forum

2003-11-25 Thread Kris Deugau
Brook Humphrey wrote: On Tuesday 25 November 2003 05:18 am, Frederick M Avolio wrote: Yesterday I again tried to install 2.60 on RedHat Linux 7.3. *This* is your problem ^^ How so? (My emphasis added) I have a number of RedHat 7.3 servers which have

Re: [SAtalk] An Open Letter to the SA-talk forum

2003-11-25 Thread Terry Milnes
Logan Harbaugh wrote: To all concerned, I apologize for the apparent maligning of SpamAssassin in my recent article in InfoWorld. In my original article, I stated that I used the 2.44 release of SpamAssassin for two reasons - because it was the version shipping with the latest release of Red

[SAtalk] Razor questions

2003-11-25 Thread Ron Weales
SA 2.55 on RH 6.2 running as spamd with Qmail.  Just installed Razor 2.36.    SA faq says to confirm that Razor is running by using debug mode and observing that razor is available and what version, etc,.  I see: Razor2 is available Using results from Razor v2.36 However, I never

[SAtalk] Ideas

2003-11-25 Thread Tony Bunce
I have been seeing lots of spam like this getting through recently Anyone have any ideas how to reduce this type of spam from getting through? Thanks, Tony B, CCNA, Network+ Systems Administration GO Concepts, Inc. / www.go-concepts.com Are you on the GO yet? What about those

[SAtalk] sa-learn and message format?

2003-11-25 Thread Dan Tappin
I am currently trying to implement bayes on my SA system. I was using spamcop before and I started using a spamcop reporting plug-in for my sa-learn reporting. I could configure the plug-in to redirect my spam, headers and all to the learning account of my choosing. I have just realized that

Re: [SAtalk] An Open Letter to the SA-talk forum

2003-11-25 Thread Kris Deugau
Frederick M Avolio wrote: Perhaps this is *my* problem. November 14 I mentioned having problems upgrading to 2.60. One of the rules was giving an error. A custom rule, or a builtin rule? I've been running 2.60 on my own 7.3 server for around two months; and I just upgraded the production

Re: [SAtalk] Ideas

2003-11-25 Thread Steve Thomas
On Tue, Nov 25, 2003 at 01:22:51PM -0500, Tony Bunce is rumored to have said: I have been seeing lots of spam like this getting through recently Anyone have any ideas how to reduce this type of spam from getting through? I noticed that this guy's using our domain name as the argument to

Re: [SAtalk] An Open Letter to the SA-talk forum

2003-11-25 Thread Brook Humphrey
On Tuesday 25 November 2003 10:22 am, Kris Deugau wrote: --snip-- didn't read most of above Because it's been around for a while and has been proven to be decently stable as a production server platform maybe? no because redhat changed thier policies and none of the big oems support any of

[SAtalk] Spamassassin hogging 100% CPU time

2003-11-25 Thread Dan Bongert
We just rolled out SpamAssassin 2.60 as a spam filtering option to our users (after using it on IT staff guinea pigs for about a month), and only have about 20 people using it so far out of a possible 800 or so. In theory, the mail server (dual 1.13 PIIIs, 1Gb RAM, FreeBSD 4.8-STABLE) should be

Re: [SAtalk] Razor questions

2003-11-25 Thread Christopher X. Candreva
On Tue, 25 Nov 2003, Ron Weales wrote: However, I never saw anything about read server list, closest server is or connecting to... So it appears that Razor isn't connecting to their servers. It just so happened --- I'm working right now on why it seems razor stopped working here. It looks

Re: [SAtalk] SpamScore check

2003-11-25 Thread Matt Kettler
At 12:12 PM 11/25/2003, Nick Tong wrote: I send out email news letters each week for my clients but I want to offer them the ability to see if there emails will be blocked due to there email containing a large amount of spam scoring text? Does anyone out there know of a plug-in for spamassassin

RE: [SAtalk] Nigerian-type scores 0.00

2003-11-25 Thread Chris Santerre
-Original Message- From: Christopher X. Candreva [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2003 11:38 AM To: [EMAIL PROTECTED] Subject: [SAtalk] Nigerian-type scores 0.00 Wow -- here's a Nigerian type spam that scored 0.00 . I've just submit it to DCC and

Re: [SAtalk] Is there a spamd config file?

2003-11-25 Thread Matt Kettler
At 12:37 PM 11/25/2003, Douglas Kirkland wrote: I am looking to have a spamd config file and been unable to find one. I may have missed it. Otherwise I will have to have a very long line to configure spamd the way I want it to run. The reason is because there is over 200 IP addresses that i

RE: [SAtalk] Nigerian-type scores 0.00

2003-11-25 Thread Mike Kuentz (2)
One big problem you have is this X-Spam-Status: No, hits=0.0 required=5.0 tests=BAYES_50 autolearn=ham That autolearned it as ham, so now all other emails that come through with will be seen as hammy. If you use the additional rules on Chris' site at

Re: [SAtalk] Is there a spamd config file?

2003-11-25 Thread Douglas Kirkland
On Tuesday 25 November 2003 10:55, Matt Kettler wrote: At 12:37 PM 11/25/2003, Douglas Kirkland wrote: I am looking to have a spamd config file and been unable to find one. I may have missed it. Otherwise I will have to have a very long line to configure spamd the way I want it to run.

[SAtalk] Re: RE: Re[2]: http://www.infoworld.com/article/03/11/14/45FEspam_1.html?s=tc

2003-11-25 Thread Chris Barnes
On Monday, November 24, 2003 4:24 PM -0800 Logan Harbaugh [EMAIL PROTECTED] wrote: The point of using the old version of SpamAssassin was to show how much the technology has changed in the last few years. That was stated in my original article but edited out of the final version. (I love copy

Re: [SAtalk] Is there a spamd config file?

2003-11-25 Thread Matt Kettler
At 02:17 PM 11/25/2003, Douglas Kirkland wrote: I am using the '-A' to tell which IP addresses to listen to. -m max-children -V virtual-config directory -p port ahh, I was confused by your abuse of the word listen... -A doesn't change the behavior of calls to listen().. Well it may not be that

RE: [SAtalk] Ideas

2003-11-25 Thread Mike Kuentz (2)
Chris' EVILRULES gets the score up by 3 on that. See http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm. Also, Colin A. Bartlett had posted a spam sentences rule set that adds an additional 2 points to that email. His original score I think was 10 for each sentence, but I decreased

Re: [SAtalk] Razor questions

2003-11-25 Thread Christopher X. Candreva
On Tue, 25 Nov 2003, Ron Weales wrote: I know Razor is running with SA, but how can I find out if Razor is using their distributed, collaborative, spam detection and filtering network? I should see something in the debugged log file about connections to servers, correct? spamassassin -D

Re: [SAtalk] lock failed: little help

2003-11-25 Thread German Staltari
On Tue, 25 Nov 2003 14:07:50 -0500, JC [EMAIL PROTECTED] wrote: What makes you say that? Could you post whatever details lead you to that conclusion? If I force an expire (sa-learn --force-expire) or force a sync (sa-learn --rebuild), no errors are reported, so It happens when an opporunistic

[SAtalk] Re: A faster and more scalable matching engine.

2003-11-25 Thread Scott A Crosby
On Tue, 25 Nov 2003 13:11:10 -0500, Roger Merchberger [EMAIL PROTECTED] writes: At 03:27 11/25/2003 -0600, Scott A Crosby wrote: An automata based regexp engine is one that can compile a set of regular expressionns down into an automata, then run the automata. The advantage this has is that

RE: [SAtalk] lock failed: little help

2003-11-25 Thread JC
What makes you say that? Could you post whatever details lead you to that conclusion? -Original Message- From: German Staltari [mailto:[EMAIL PROTECTED] On Tue, 25 Nov 2003 10:36:55 -0500, JC [EMAIL PROTECTED] wrote: Actually, I think I remembered! I think what I did was to run

Re: [SAtalk] InfoWorld article hits Slashdot...

2003-11-25 Thread Dan Wilder
On Tue, Nov 25, 2003 at 04:43:35PM +0200, Zak McGregor wrote: Hi all The InfoWorld article has just hit Slashdot (http://www.slashdot.org/) It took 'em long enough. -- - Dan Wilder [EMAIL PROTECTED] Technical Manager SSC,

[SAtalk] Bayes expiry

2003-11-25 Thread Yevgeniy Miretskiy
Hello, sa-learn stopped learning messages. Debugging shows that it can successfully tie Bayes db, extracts tokens, etc, but never actually writes data to the database. I had a db corruption issue some time ago, so, this could very well be remnants of that. Anyway, I'm trying to run sa-learn

RE: [SAtalk] Ideas

2003-11-25 Thread Mark Muller
I was running a whitelist on our local domain for a long time but overcoming whitelisted spam became too much of a chore. So I removed the whitelist entry and replaced with a header check on Received to verify it came from our internal machines, then assigned it -50. Then I slap a 5.1 on

RE: [SAtalk] Evil rules, popcorn, etc too much?

2003-11-25 Thread Chris Santerre
-Original Message- From: Chris Thielen [mailto:[EMAIL PROTECTED] Sent: Monday, November 24, 2003 6:16 PM To: [EMAIL PROTECTED] Subject: RE: [SAtalk] Evil rules, popcorn, etc too much? Chris Santerre said: The FP rate for all of these is just about zero. I recommend popcorn,

RE: [SAtalk] Nigerian-type scores 0.00

2003-11-25 Thread Christopher X. Candreva
On Tue, 25 Nov 2003, Mike Kuentz (2) wrote: One big problem you have is this X-Spam-Status: No, hits=0.0 required=5.0 tests=BAYES_50 autolearn=ham Oh yeah -- already re-learned as spam. with will be seen as hammy. If you use the additional rules on Chris' site at

Re: [SAtalk] sa-learn and message format?

2003-11-25 Thread Matt Kettler
At 01:43 PM 11/25/2003, Dan Tappin wrote: When I run sa-learn I only see the '1 message learned' output even thought I forwarded multiple messages to that mailbox. Any ideas / comments? sa-learn --mbox unless you add the --mbox parameter, sa-learn expects a single rfc822 format message per

Re: [SAtalk] An Open Letter to the SA-talk forum

2003-11-25 Thread Frederick M Avolio
A custom rule, or a builtin rule? built-in. I looked back through one of the archives (the other seemed to be a little broken), but didn't see any messages from you around Nov 14. http://marc.theaimsgroup.com/?l=spamassassin-talkm=106883816809749w=2 The error was: Nov 14 11:02:12 lh

Re: [SAtalk] What level to delete at?

2003-11-25 Thread up
We tag it as spam at 6.0 and delete it after 5 days. Since we get over 200MB of spam a day (for less than 1300 email accounts), keeping it indefinitely is not an option. The user has 5 days to check the Spam folder in their web email to catch any FPs. If they like we can bypass the filtering

Re: [SAtalk] Razor questions

2003-11-25 Thread Ron Weales
My .razor/servers.discovery.lst has 66.151.150.11. I know Razor is running with SA, but how can I find out if Razor is using their distributed, collaborative, spam detection and filtering network? I should see something in the debugged log file about connections to servers, correct?

RE: [SAtalk] Re: RE: Re[2]: http://www.infoworld.com/article/03/1 1/14/45FEspam_1.html?s=tc

2003-11-25 Thread Chris Santerre
-Original Message- From: Chris Barnes [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2003 2:00 PM To: [EMAIL PROTECTED] Subject: [SAtalk] Re: RE: Re[2]: http://www.infoworld.com/article/03/11/14/45FEspam_1.html?s=tc On Monday, November 24, 2003 4:24 PM -0800 Logan

spamd 90% cpu or higher -- was: RE: [SAtalk] Spamassassin hogging 100% CPU time

2003-11-25 Thread Jeff Garvas
We just replaced our old qmail-scanner + spamd system with a fresh install, and we had a concurrency incoming of about 150. The old single processor PIII 800 handled this just fine. The new dual PIII 1Ghz would supposedly work much better. With qmail-scanner 1.20 and spamd 2.60 it managed to

Re: [SAtalk] Spamassassin hogging 100% CPU time

2003-11-25 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dan Bongert writes: We just rolled out SpamAssassin 2.60 as a spam filtering option to our users (after using it on IT staff guinea pigs for about a month), and only have about 20 people using it so far out of a possible 800 or so. In theory, the

RE: [SAtalk] *.easynet.nl DNSBL's ceasing on Dec 1, 2003

2003-11-25 Thread Chris Santerre
If you have been in a cave, easynet is shutting down. They have on their web page the following: easynet.nl Spamlist - DISCONTINUED DEC 1 2003 easynet.nl Dynablock dial-up database - dynablock.easynet.nl - DISCONTINUED DEC 1 2003 Suggestion for replacement: dul.dnsbl.sorbs.net easynet.nl

No longer Re: [SAtalk] An Open Letter to the SA-talk forum

2003-11-25 Thread Bart Schaefer
On Tue, 25 Nov 2003, Frederick M Avolio wrote: http://marc.theaimsgroup.com/?l=spamassassin-talkm=106883816809749w=2 The error was: Nov 14 11:02:12 lh spamd[17078]: Use of uninitialized value in open at /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/TextCat.pm line 63. This may mean

RE: [SAtalk] Ideas

2003-11-25 Thread Larry Gilson
-Original Message- From: Larry Gilson Sent: Tuesday, November 25, 2003 3:30 PM To: 'Tony Bunce'; '[EMAIL PROTECTED]' Subject: RE: [SAtalk] Ideas Attached is a custom rule file. It has been working rather well and I will be increasing the score from 0.5 to 1.0. The cf file also has

Re: spamd 90% cpu or higher -- was: RE: [SAtalk] Spamassassin hogging 100% CPU time

2003-11-25 Thread Mike Jackson
We just replaced our old qmail-scanner + spamd system with a fresh install, and we had a concurrency incoming of about 150. The old single processor PIII 800 handled this just fine. The new dual PIII 1Ghz would supposedly work much better. With qmail-scanner 1.20 and spamd 2.60 it managed

[SAtalk] making sa learn

2003-11-25 Thread skumm
I am unclear as to how to feed mail that is spam and gets by the filters back into sa so that it can learn them. can someone walk me how to do this, especially if the mail to be marked as spam is on a windows box now and not the linux box (I use doze for my mail client, and linux for serving...

RE: [SAtalk] *.easynet.nl DNSBL's ceasing on Dec 1, 2003

2003-11-25 Thread Christopher X. Candreva
On Tue, 25 Nov 2003, Chris Santerre wrote: My question is, What are the views of sorbs.net? Is it effective? FPs are my worst nightmare. IF it blocks open proxies, (like Korea!) I'm screwed. Any comments are welcome. I just realised with the holidays that I have to fix this soon :) I just

Re: [SAtalk] A faster and more scalable matching engine.

2003-11-25 Thread Simon Byrnand
At 03:27 11/25/2003 -0600, Scott A Crosby wrote: ... except one caveat: What was the memory utilization like? That's *my* big problem with SA - I had to bump the RAM in my mailserver twice (256M - 512M - 1G) for SA alone, and it's still shakey to the point I cannot deploy it sitewide... :-/

RE: [SAtalk] Ideas

2003-11-25 Thread Jennifer Wheeler
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tony Bunce Sent: Tuesday, November 25, 2003 1:23 PM To: [EMAIL PROTECTED] Subject: [SAtalk] Ideas I have been seeing lots of spam like this getting through recently   Anyone have any ideas how to reduce

[SAtalk] Razor questions

2003-11-25 Thread Stephen Swaney
Check out the documentation at the razor site. As a result of reading these docs I'm running a small cron script daily: razor discover: #! /bin/bash # refresh /root/.razor/ razor-admin -discover Viola - no razor problems. Steve Swaney s[EMAIL PROTECTED] On Tue, 25 Nov 2003 13:58:53

[SAtalk] Re: A faster and more scalable matching engine.

2003-11-25 Thread Roger Merchberger
Rumor has it that Scott A Crosby may have mentioned these words: On Tue, 25 Nov 2003 13:11:10 -0500, Roger Merchberger [EMAIL PROTECTED] writes: The response was that at a half-second a message is enough. You prolly didn't get many qmailers to respond, then... If it wasn't for SA spam, my

Re: [SAtalk] sa-learn and message format?

2003-11-25 Thread Clive Dove
On Tuesday 25 November 2003 14:31, Matt Kettler wrote: At 01:43 PM 11/25/2003, Dan Tappin wrote: When I run sa-learn I only see the '1 message learned' output even thought I forwarded multiple messages to that mailbox. Any ideas / comments? sa-learn --mbox unless you add the --mbox

  1   2   >